Fighter Jet Designs, Missile Schematics, and Fusion Simulations: The Full Terrifying List of What Was Allegedly Stolen From China’s Hacked Supercomputer

The world woke up to a cybersecurity story in April 2026 that security analysts are already calling one of the most consequential data breaches in modern history. A mysterious hacker — or group — operating under the name “FlamingChina” claims to have penetrated the National Supercomputing Center (NSCC) in Tianjin, China, and silently walked away with more than 10 petabytes of some of the most classified military, aerospace, and scientific research data ever compiled under one digital roof. Fighter jet blueprints. Missile schematics. Nuclear fusion simulations. Surveillance architecture. If the claims are verified, what was stolen represents not just a national security catastrophe for China, but a seismic shift in the global balance of military and technological power.

What Is the NSCC Tianjin — and Why Does It Matter?

Before understanding the scale of what was allegedly stolen, you need to understand exactly what was breached. The National Supercomputing Center in Tianjin is not just a powerful computer. It is the central nervous system of China’s most sensitive research and defense computing infrastructure.

The NSCC Tianjin serves as a centralized hub that provides high-performance computing infrastructure to more than 6,000 clients across China, spanning government agencies, military contractors, defense universities, aerospace corporations, and cutting-edge scientific research institutions. Think of it as the cloud server for China’s most classified work — every simulation, every design iteration, every research calculation that is too complex for ordinary systems flows through facilities like this one. The clients it services include giants like the Aviation Industry Corporation of China (AVIC), the Commercial Aircraft Corporation of China (COMAC), and the National University of Defense Technology — three organizations that sit at the absolute top of China’s military-industrial hierarchy.

To put the volume of stolen data in perspective: one petabyte equals 1,000 terabytes. A high-specification consumer laptop typically holds around one terabyte of storage. The alleged theft of 10 petabytes is the equivalent of emptying out 10,000 top-of-the-line laptops worth of data — all of it reportedly drawn from the most sensitive corners of China’s national security apparatus.

How the Hack Allegedly Happened: A Six-Month Silent Operation

What makes this breach particularly chilling is not just what was taken — it is how it was taken, and for how long it went undetected. According to cybersecurity expert Lukasz Olejnik, who reviewed leaked samples and spoke to CNN, the attacker made contact via Telegram and described the method in striking detail.

The hacker claimed to have gained initial entry through a compromised VPN domain — a single point of failure in what was supposed to be a secure perimeter around one of China’s most critical digital assets. Once inside, FlamingChina did not run a smash-and-grab operation. Instead, they deployed a sophisticated botnet — a network of automated programs — that quietly infiltrated the NSCC’s internal systems, mapped its data architecture, and began methodically extracting and storing information.

The extraction of 10 petabytes of data reportedly took approximately six months to complete. Six months of undetected access to the beating heart of China’s defense research computing. Six months during which military contractors were unknowingly uploading fresh classified data to systems that a foreign attacker was simultaneously draining. The botnet was patient, automated, and effective — the kind of operation that cybersecurity professionals describe as an Advanced Persistent Threat (APT), typically associated with state-sponsored actors, not lone hackers.

The attacker first surfaced publicly on February 6, 2026, posting samples of the stolen data to Telegram channels and announcing the dataset was available for sale. The audacity of the move — openly auctioning 10 petabytes of Chinese military secrets on a messaging app — immediately drew global attention from intelligence agencies, cybersecurity firms, and investigative journalists.

The Full List: What Was Allegedly Stolen?

This is the question that has defense analysts around the world losing sleep. The leaked sample data, reviewed by independent cybersecurity experts, reportedly contains the following categories of classified material. It is important to note that while experts who have reviewed the samples consider the data to be potentially genuine, the full dataset has not been independently verified, and China has not officially confirmed or denied the breach. With that essential caveat, here is what is allegedly inside those 10 petabytes:

Fighter Jet Designs and Aerospace Engineering Data
Perhaps the most alarming category is the aerospace engineering data, reportedly linked to AVIC and COMAC — the two corporations responsible for designing and manufacturing China’s military and civilian aircraft, including advanced stealth fighters. The samples allegedly contain detailed schematics, three-dimensional renderings, aerodynamic modeling data, and technical specifications for aircraft systems. If authentic, this data could allow a sophisticated adversary to understand the precise capabilities, weaknesses, and performance envelopes of China’s next-generation fighter jets — intelligence that would normally require years of espionage, satellite surveillance, and test flight observation to obtain. Leaked samples reportedly include data connected to aerospace testing programs, satellite infrastructure, and potentially the development pipelines of aircraft that have not yet entered full production.

Missile Schematics and Ballistic Weapons Systems
Multiple cybersecurity analysts who reviewed the sample data reported that it includes detailed technical renderings and manuals for hypersonic and ballistic missile systems. China’s hypersonic missile program is widely considered one of the most advanced in the world, with weapons like the DF-17 and DF-41 representing capabilities that have deeply concerned NATO planners and the U.S. Department of Defense. If internal schematics, guidance system architecture, propulsion engineering, and targeting data for these systems have been exfiltrated, the implications for global deterrence are profound. A rival nation studying these schematics could potentially develop countermeasures, exploit design vulnerabilities, or accelerate their own parallel programs by years.

Nuclear Fusion Research and Physics Simulations
China has invested billions into becoming the world leader in fusion energy — the clean, effectively limitless power source that scientists have been chasing for decades. The NSCC Tianjin was reportedly used to run some of the world’s most complex fusion plasma simulations, requiring the kind of raw computing power only a national supercomputing center can provide. Stolen fusion research data is not a direct weapons threat — but it represents enormous strategic and economic value. The nation that cracks commercial fusion energy first will hold an energy independence advantage unlike anything seen in the 21st century. Handing rivals a shortcut through years of Chinese fusion research is an incalculable loss that may not be fully understood for decades.

Bomb Design Renderings and Nuclear Weapons Research
Among the most disturbing claims from reviewers of the sample data is the alleged presence of bomb design schematics and renderings originating from China’s defense research universities and military contractors. The National University of Defense Technology — one of the NSCC’s confirmed clients — conducts research that bridges conventional weapons systems and strategic nuclear capabilities. While it is impossible to confirm from leaked samples alone what the full nuclear dimension of this data involves, the inclusion of bomb design renderings in the visible samples raises deeply serious questions about what else may exist in the remaining petabytes.

Surveillance Technology Architecture and Internal Security Systems
The breach does not stop at kinetic weapons. Leaked samples reportedly also contain internal login credentials, technical manuals, and system architecture data for state-run Chinese security and surveillance networks. China’s domestic surveillance infrastructure — which includes facial recognition systems, citizen tracking networks, and internet monitoring platforms — runs on some of the most sophisticated technology in the world. Details about how these systems are built, how they communicate, and where their vulnerabilities lie could be exploited not just by rival governments, but by dissidents, activists, and foreign intelligence agencies seeking to understand or disrupt Chinese state surveillance operations.

Bioinformatics and Scientific Research Data
Beyond the immediately military-relevant material, the stolen dataset is alleged to include bioinformatics research — genetic and biological computation data that China has been developing aggressively. While bioinformatics has many civilian applications, its intersection with dual-use biological research means that stolen datasets could carry implications for biosecurity and defense biological programs. This category of the breach has received less media attention, but cybersecurity experts tracking the full scope of the alleged leak have flagged it as a serious component of what was taken.

The Mystery Deepens: Experts Removed From China’s Science Registry

One of the most unsettling corroborating details of this story is not digital — it is bureaucratic. In March 2026, multiple senior Chinese experts in aviation, nuclear weapons, radar systems, and missile technology were quietly removed from the official website of the Chinese Academy of Engineering (CAE) without any public explanation.

The CAE is China’s most prestigious engineering institution. The removal of prominent experts from its public registry is highly irregular and carries significant implications. Cybersecurity researchers and national security analysts have pointed to this unexplained purge as potentially consistent with a scenario in which Chinese authorities became aware of the breach and began quietly investigating which researchers’ work had been compromised — and potentially who among the security apparatus was responsible for the failure that allowed it to happen. Whether these removals are connected to the alleged breach or represent an independent internal review remains unconfirmed, but the timing is striking enough that multiple international analysts have flagged it as a data point worth watching.

Who Is FlamingChina — and What Do They Want?

The identity of FlamingChina remains unknown. The actor — who may be an individual or a coordinated group — has communicated via Telegram and has posted the stolen dataset for sale, reportedly at a price that cybersecurity observers have described as surprisingly low given the data’s alleged strategic value.

The low asking price has prompted two competing theories in the security community. The first is that FlamingChina is a financially motivated criminal hacker who underestimates what they possess. The second — and more alarming — theory is that the sale is a cover, and that the dataset has already been acquired by a state-level intelligence buyer, with the public Telegram auction designed to create plausible deniability or to distribute the data so widely that containing it becomes impossible. Neither theory can be confirmed at this stage, but both are being actively investigated by cybersecurity firms monitoring the situation.

Beijing’s Silence — and What It Tells Us

As of the time of writing, the Chinese government has issued no official statement acknowledging the breach, confirming the theft, or denying the existence of the compromised data. This silence is itself informative. China has, on past occasions, issued swift and forceful denials when accused of suffering major security failures. The absence of any denial in this case — combined with the quiet removal of engineers from the CAE website — suggests that Chinese authorities are taking the claims seriously, even if they are unwilling to acknowledge them publicly.

The geopolitical implications of such an acknowledgment are obvious. Admitting that 10 petabytes of classified military research — including fighter jet designs and missile schematics — were silently extracted from a state supercomputer over six months would be a profound embarrassment for a government that has positioned cybersecurity and technological sovereignty as central pillars of national prestige.

What Happens Now — and Why the World Should Pay Attention

The full verification of the FlamingChina dataset will take time, and it is entirely possible that some or all of the claimed content is exaggerated, fabricated, or a combination of genuine and forged documents designed to confuse attribution and inflate the dataset’s value. Independent cybersecurity analysts who have reviewed the available samples, however, have assessed the data as potentially genuine — a verdict that must be taken seriously.

For the United States, Europe, India, and other nations whose defense planning scenarios involve Chinese military capabilities, the alleged theft of this data creates a profound intelligence paradox: if the data is real and has been acquired by a rival, the strategic calculations built around Chinese military capability may need to be entirely re-evaluated. Adversaries who have purchased or obtained this data now potentially know more about China’s weapons systems than China’s own intelligence assessments of their adversaries’ knowledge had previously anticipated.

For global cybersecurity practitioners, this breach — if confirmed — represents a landmark case study in the catastrophic consequences of a single compromised VPN credential. An organization serving 6,000 defense and scientific clients, running some of the world’s most sensitive computing workloads, was allegedly penetrated through a vulnerability that basic zero-trust architecture and multi-factor authentication could have mitigated.

The Bigger Picture: Supercomputers Are the New Nuclear Vaults

The NSCC Tianjin breach is not an isolated incident of opportunistic hacking. It is a signal that the world has entered a new era in which supercomputing centers are the most valuable and most vulnerable strategic targets on earth. These facilities hold the simulations, the designs, the research outputs, and the intellectual property that determine which nations build the fastest missiles, the most lethal aircraft, the most efficient nuclear warheads, and the most advanced surveillance systems.

Breaching one is not like stealing a briefcase of documents. It is like stealing an entire national laboratory’s worth of work product in a single operation — silently, automatically, and without firing a single shot. The FlamingChina case, whether fully verified or not, has permanently changed how military and civilian cybersecurity planners will think about the protection of high-performance computing infrastructure.

The 10 petabytes allegedly sitting on Telegram right now — fighter jet renderings, hypersonic missile guides, fusion plasma simulations, surveillance network blueprints — are a reminder that in 2026, the most dangerous weapon in the world is not a warhead. It is a compromised password on a VPN server attached to a supercomputer.

All claims in this article are based on reporting by CNN, TechRadar, NDTV, and independent cybersecurity analysis as of April 2026. The breach has not been independently verified, and China has not issued an official response. This article will be updated as new information becomes available.