Espresso being made at the Everyman Expresso coffee house in the Soho section of New York on July 31, 2012. (Stan Honda/AFP via Getty Images)
By
U.S.-based researcher Christopher Balding said he found evidence that the Chinese Communist Party (CCP) is obtaining data via smart coffee machines that are made in China, warning that such tactics may be employed against American consumers.
Balding, who released a report via New Kite Data Labs, said that issues with the Chinese internet-connected coffee machines are allowing CCP officials to collect data on Americans.
“China is really collecting data on really just anything and everything,” he said in the report, released this week. “As a manufacturing hub of the world, they can put this capability in all kinds of devices that go out all over the world.”
Some of the insecure coffee machines are made by the Kalerm firm based in Jiangsu, China, which obtains product information, payment data, and other consumer information such as time, location, and other data, the report said. Within a commercial setting such as a hotel, those machines could collect routing information and payment types.
In the report, Balding said he won’t disclose how he obtained that information because he doesn’t want the Chinese regime to stop him from learning more about the CCP’s data-collection efforts targeting Americans and others. The report said that the data is collected from consumers inside mainland China, but it noted that such Chinese-made smart coffee machines are sold widely in the United States and Europe.
“While we cannot say this company is collecting data on non-Chinese users, all evidence indicates their machines can and do collect data on users outside of Mainland China and store the data in China,” the report said, according to the Washington Times newspaper. “The data is collected at the point of operation from software embedded in the coffee maker.”
The CCP has long pursued policies that force businesses to adhere to its draconian policies and forces them to cooperate with the ruling communist party. Notably, cybersecurity experts have warned that TikTok users are likely feeding data to the CCP by way of ByteDance, a Beijing-based Internet company.
“We must assume,” Casey Fleming, a cyber security expert and CEO of strategic advisory firm BlackOps Partners, told EpochTV in February, “that every one of these applications coming from China, Russia, and other declared adversaries of the United States—we have to assume that these applications are weaponized against us.”
Fleming then cautioned: “The Communist Party of China is collecting vast amounts of data. It may not be used against you today. But this information might be used against you, your company, or your country in the future.”
In February, meanwhile, a research fellow with the Atlantic Council think tank said that the CCP is using a whole-of-society approach to carry out information operations against the United States.
“The Chinese Communist Party wants China to become a ‘cyber superpower’ and is well on its way to achieving that goal,” said Winnona DeSombre, the fellow. “China is a major peer adversary in cyberspace. Its offensive cyber capabilities rival the United States,’ its operations demonstrate clear development of asymmetric capabilities that enable it to achieve strategic goals, and its cyber defensive capabilities are robust.”