Exposed China Police Dashboard Tracked 700+ Foreign Residents

A cybersecurity researcher in Amsterdam went looking for how China surveils its own citizens and, according to The New York Times, stumbled into something else: an unsecured police dashboard, labeled the Dynamic Control Platform for Overseas Personnel, apparently built for the Zhangjiakou Public Security Bureau to track foreigners living in or passing through the city that hosted the 2022 Winter Olympics.

The scale is the part that lands. Marc Hofer reportedly found more than 700 foreign residents on the dashboard and nearly 12,000 total entries, including people from Hong Kong and Taiwan, fugitives, and more than 300 foreign journalists. Each entry could carry the basics you would expect — nationality, birth date, address, occupation, sometimes religion — but also a running log of daily life: places frequented, hospital visits, gas payments, and the specific carriage and seat numbers of trains people took in from Beijing or Shanghai. Photos from facial-recognition gates at local ski resorts were pulled in alongside the state's own camera feeds.

Why this matters beyond one city: the interesting claim is not that China surveils foreigners, which was assumed, but that the plumbing to do it at an individual, cross-referenced level appears to already be assembled and running out of a regional police bureau. The Times reports links between the platform and Origin Dynamic, a Beijing company that supplies robotics and surveillance gear to police via public tenders. That is the shape of a productized system, not a one-off experiment.

The honest caveat is that most of what we know here flows through a single researcher and a single news outlet. The dashboard was reportedly taken offline in May, after Hofer began downloading from it in January, so independent verification of what was live versus demo is limited. The reporting does not tell us whether other Chinese cities run comparable platforms, or exactly how Origin Dynamic's role breaks down between vendor, integrator, and operator.

For anyone with staff, students, or reporters inside China, the practical read is that ordinary consumer touchpoints — a ski pass, a clinic visit, a train ticket, a fuel purchase — should be assumed to be joinable into a single police-side view, and that travel and device policies should be written with that assumption rather than the older one that only obvious surveillance targets get the full treatment.