New York, January 13, 2010—The Committee to Protect Journalists expressed concern today after Google said Tuesday it had uncovered evidence of cyber attackers from China targeting its own and other companies’ infrastructures, as well as individual Gmail accounts. CPJ welcomed Google’s statement that it was no longer willing to censor its Chinese search engine, Google.cn, in light of the discovery.
"We are concerned that threats to e-mail security undermine
the safety of journalists working in China, their assistants, and their
local sources,” said CPJ Deputy Director Robert Mahoney, who is CPJ’s
representative to the board of the Global
Network Initiative. “Google’s refusal to continue censoring content is a
welcome example of the positive role international companies can play in
demanding that China
improve access to information.”
In a statement
Tuesday by Chief Legal Officer David Drummond, Google said it detected the
“highly sophisticated” attacks in December 2009 and that the company will
notify at least 20 other Internet, technology, and media companies that they
had been similarly targeted. Drummond said that while the two Gmail security
breaches to Google’s own servers were minor, its research showed China-based
hackers had “routinely accessed” individual Gmail accounts belonging to human
rights advocates in China, Europe, and the United States.
“The fact that media companies may have been targeted underscores
the vulnerabilities of journalists working in China,” Mahoney said.
China
uses vague state secret charges to imprison Chinese citizens who communicate
online about sensitive issues like the government’s human rights record, CPJ research shows. At least one journalist, Shi
Tao, was imprisoned in 2005 after Yahoo provided information to Chinese
authorities about the personal e-mail account he used to send an internal
propaganda department memo overseas.
Hackers have targeted journalists and their assistants
working in China
in the past, according to CPJ
research. CPJ and other rights organizations were also aware of an increase
in cyber attacks, some traced to China, in the run-up to the 2008
Beijing Olympics. The origins of the attacks are not clear.
Drummond said Google planned to discuss with Beijing “the basis on
which we could operate an unfiltered search engine within the law, if at all.
We recognize that this may well mean having to shut down Google.cn.” Google launched Google.cn
in January 2006, agreeing
to content restrictions imposed by Chinese authorities but disclosing to users
if search results had been filtered. Uncensored Chinese-language searches
remained possible in China
on Google.com. Google also pledged to
maintain e-mail and blogging services overseas to protect personal data.
State news agency Xinhua said China was seeking more information
from Google. Other coverage in China’s
official press censored the wording of Google’s statement, omitting mentions of
“free speech” and “surveillance,” according to The
New York Times.
China’s
censorship and surveillance of the Internet steadily worsened
in 2009, under the guise of limiting pornography or maintaining social
stability. Several Google
services, including video-sharing Web site YouTube, were
frequently blocked to users in China
during the year.