Skip to content
Brand AI

Alibaba Cloud

Controversies

Controversies tied to this brand in public sources. A listing is not a finding of fault.

Back to profile2 entries

  1. 2021

    Alibaba Cloud suspended from MIIT platform cooperation qualification for failing to report Log4j2 vulnerability in time

    In December 2021, according to reports on a notice by the Cybersecurity Administration Bureau of the Ministry of Industry and Information Technology, Alibaba Cloud Computing Co., Ltd. failed to promptly report the severe Apache Log4j2 vulnerability to the telecommunications authorities after discovering it and did not effectively support vulnerability management. Its qualification as a cooperating unit of the cybersecurity threat information sharing platform was suspended for six months.

    Source

  2. 2019

    Alibaba Cloud customer information disclosure

    Issue disclosure

    Alibaba Cloud said its self-check indicated that, around the 2019 Singles’ Day period, an employee improperly obtained customer contact information and disclosed it to a distributor’s employee, leading to a customer complaint. The report also says the Zhejiang communications authority ordered the company to rectify the issue.

    Company response

    • Investigation — 阿里云

      23日，阿里云方面向媒体确认了该消息，称根据自查，该投诉事件应为2019年双11前后

    • Personnel action — 阿里云

      已严肃处理和积极整改

    • Remediation — 阿里云

      已严肃处理和积极整改

    Source excerpt

    • 23日，阿里云方面向媒体确认了该消息，称根据自查，该投诉事件应为2019年双11前后，阿里云一名电销员工违反公司纪律，利用工作便利私下获取客户联系方式，并透露给分销商员工，从而引发客户投诉。
    • 据大陆媒体21世纪经济报导，近日，网络流传一份浙江省通信管理局对投诉人的答复函，称经调查核实，阿里云计算有限公司未经用户同意擅自将用户留存的注册信息泄露给第三方合作公司，当局已责令公司改正，落款日期为7月5日。
    Source