Officials say penalty will mark end of year-long probe into group's operations, cybersecurity practices and handling of personal data. Didi would then be able to list in Hong Kong, report says.
TikTok is likely harvesting the data from troops to understand US army strategy and the locations of military barracks, said the Federal Communications Commission.
A report by the Wall Street Journal, citing sources familiar with the matter, said that Shanghai authorities had summoned executives from Alibaba's cloud division in relation to the data breach.
TikTok said its staff in China were able to access Australian users' data but added that "our security teams minimise the number of people who have access to data"
The rules will govern how companies and other entities handle large quantities of personal user information, the Cyberspace Administration of China (CAC) said
"The Chinese government is set on stealing your technology — whatever it is that makes your industry tick—and using it to undercut your business and dominate your market," says the FBI.
Hacker offering to sell the more than 23 terabytes of data for 10 bitcoin, equivalent to about $200,000.
CAC said it had amassed a fraud database of 3.8 million websites and 500,000 apps. It did not specify if any are still operating or elaborate on any penalties issued
Companies that collect personal data will be responsible for assessing if it needs to be protected when it is transferred overseas, under new rules drafted by the China's government regulator
Beijing spymasters recruited the English-language graduates on behalf of APT40, which snoops on US, Canadian, European, Israeli and Arab agencies, companies and universities