If users' information leaks from your website or app, remedy it at once, notify users and the competent authority, and report to the police if you were attacked

In plain words

If users' information has leaked or may have leaked, you must remedy it at once and notify the competent authority and the affected users. If you hide it and don't report, you are first ordered to correct it, and if you don't, fined up to 1,000,000 (100万) CNY, and in serious cases up to 50,000,000 (5000万) CNY. If users are harmed as a result, you must compensate them unless you can prove you were not at fault. If you had protections in place, handled it according to your plan and reported promptly, you may be given a lighter penalty or none, depending on the circumstances.