Twenty two people have been arrested out of which twenty worked for Apple or companies Apple outsources to.
The employees illegally used Apple's internal system to acquire the Apple ID, name, phone number, and other data of customers. The information was then sold for between 10 yuan ($1.46) and 180 yuan ($26.27) each. The total money involved has initially been estimated at over 50 million yuan ($7.3 million).
A new Chinese law that took effect June 1st makes acquisition, sale, or provision of 50 or more pieces of information pertaining to personal whereabouts, communication content, credit and property a crime. For those who work in financial, telecommunications and medical care sectors, 25 pieces of information leaked is considered a crime if leaked for personal benefit.
Notably, under the new law, Apple could face investigation and possibly fines if their systems have inadequate protections against a leak.