In short: On 2 August 2026 The New York Times revealed a Chinese "Dynamic Platform for Management of Overseas Personnel" — a system that fuses facial-recognition camera hits, train and flight tickets, hotel stays, clinic visits and payments into a single profile of a foreign visitor. The exposed database held around 12,000 people. The real lesson is less about China than about how much of your life can be reconstructed from your "digital shadow" — and how to shrink it.
What happened
On 2 August 2026 The New York Times published an investigation into a platform built for the police of Zhangjiakou, a city that hosted 2022 Winter Olympics events. Dutch security researcher Mark Hofer found an open web interface exposing records on roughly 12,000 foreigners — journalists, students and people flagged as "key persons," including citizens of Taiwan, Egypt, Iran, Israel, Morocco, Pakistan and Sudan. According to the report, equipment and services were supplied by a Beijing company, Origin Dynamic.
What matters for an ordinary reader is not the geopolitics but the design. It shows that modern surveillance rarely breaks encryption — it stitches together ordinary, scattered traces: the camera you walked past, the flight you took, the hotel where you stayed. We looked at how those fears play out closer to home in our piece on surveillance concerns around apps.
What data is merged into a profile
Per the NYT, each person's card combined facial-recognition camera hits, train and air travel (down to seat numbers), hotel stays, medical visits, home address, visa and passport details, phone number, date of birth and even payments such as refuelling a car. From these fragments the platform assembled routes and links between people and let operators track movements in near real time.
None of these sources is secret on its own. The danger is the aggregation: a ticket, a receipt and a camera frame combined become a detailed chronicle of a life. It is the same reason a metadata leak can be worse than a password leak — you can change a password, but you cannot recall the fact that you "were here at this time."
What it means for an ordinary person
You are unlikely to end up in a foreign police database, but the mechanism — collecting and stitching traces — operates around all of us: ad brokers, carriers, apps, public Wi-Fi. Your "digital shadow" is built from location, browsing history, connection metadata and payments. The more traces you leave, the more detailed the profile someone else holds — and the more valuable it becomes in the next breach or request.
How do you shrink your digital shadow?
Minimise the data. Give apps and services only what they truly need: switch off unnecessary permissions (location, contacts), skip optional fields, and keep a separate email for sign-ups.
Be careful on other people's networks. Hotel and airport Wi-Fi is controlled by whoever owns it, and the network operator can see which endpoints you reach. A no-logs VPN encrypts your traffic before it leaves for the internet, so the network owner sees only an encrypted stream rather than a list of your sites and apps. We covered travel privacy in depth in our piece on staying connected on the road.
An honest limit. A VPN protects the connection, but it will not hide you from a camera, passport control or a booking system — those are physical and account traces. Digital hygiene is a set of habits, not a single button: minimal permissions, encrypted traffic, caution on public networks. LiMP VPN is a no-logs service for iOS and Android — see the plans, and follow more privacy news on our blog.
Sources
This report is based on the investigation by The New York Times and reporting by Lenta.ru and SecurityLab.ru, which independently described the Chinese foreigner-tracking platform.