Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Application Security

Executive Fired From TikTok’s Chinese Owner Says Beijing Had Access to App Data in Termination Suit

Former ByteDance executive said China government officials maintained access to all TikTok data, including information stored in the United States.

China access to TikTok Data

A former executive fired from TikTok’s parent company ByteDance made a raft of accusations against the tech giant Friday, including that it stole content from competitors like Instagram and Snapchat, and served as a “propaganda tool” for the Chinese government by suppressing or promoting content favorable to the country’s interests.

The allegations were made in a complaint Friday by Yintao Yu, the head of engineering for ByteDance’s U.S. operations from August 2017 to November 2018, as part of a wrongful termination lawsuit filed earlier this month in San Francisco Superior Court. Yu claims he was fired for disclosing “wrongful conduct” he saw at the company.

In the complaint, Yu alleges the Chinese government monitored ByteDance’s work from within its Beijing headquarters and provided guidance on advancing “core communist values.”

Yu said government officials had the ability to turn off the Chinese version of ByteDance’s apps, and maintained access to all company data, including information stored in the United States.

ByteDance did not immediately respond to a request for comment.

The allegations come as TikTok – one of the most popular social media apps in the U.S. — faces heightened scrutiny in Washington and some states about whether it can keep American data safe from the Chinese government. The Biden administration has threatened to ban the app if its Chinese owners don’t sell their stakes.

TikTok maintains it never gave U.S. user data to China’s government and wouldn’t do so if it was asked. In an effort to avoid a ban, it also wants to store U.S. user data on servers operated by the software giant Oracle.

Advertisement. Scroll to continue reading.

In another attention-grabbing part of the lawsuit, Yu alleges he observed ByteDance promoting content that expressed hatred for Japan on Douyin, the Chinese version of TikTok. At another time, he said the company demoted content that showed support for the protests in Hong Kong while promoting content that expressed criticism of the protests.

Yu said ByteDance developed software that would scrape user content from competitors’ websites without permission. He alleges the company would then repost the content on its own websites – including TikTok – to attract more engagement from users.

Yu said a fellow TikTok executive in charge of the video-sharing app’s algorithm waved off his concerns. At some point, Yu said the company modified the program, but continued to scrape data from U.S. users when they were abroad.

The former executive also alleges the company created fake users to boost its engagement metrics, including by programming them to “like” and “follow” real accounts.

Yu is seeking punitive damage, lost earnings and 220,000 ByteDance shares that had not vested by the time he was fired.

Written By

Click to comment

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

SecurityWeek’s Threat Detection and Incident Response Summit brings together security practitioners from around the world to share war stories on breaches, APT attacks and threat intelligence.

Register

Securityweek’s CISO Forum will address issues and challenges that are top of mind for today’s security leaders and what the future looks like as chief defenders of the enterprise.

Register

Expert Insights

Related Content

Application Security

Cycode, a startup that provides solutions for protecting software source code, emerged from stealth mode on Tuesday with $4.6 million in seed funding.

Application Security

PayPal is alerting roughly 35,000 individuals that their accounts have been targeted in a credential stuffing campaign.

Application Security

GitHub this week announced the revocation of three certificates used for the GitHub Desktop and Atom applications.

Compliance

The three primary drivers for cyber regulations are voter privacy, the economy, and national security – with the complication that the first is often...

Cyberwarfare

Websites of German airports, administration bodies and banks were hit by DDoS attacks attributed to Russian hacker group Killnet

Application Security

Drupal released updates that resolve four vulnerabilities in Drupal core and three plugins.

Application Security

A CSRF vulnerability in the source control management (SCM) service Kudu could be exploited to achieve remote code execution in multiple Azure services.

Application Security

While there are many routes to application security, bundles that allow security teams to quickly and easily secure applications and affect security posture in...