One evening in late December last year, I received a cryptic phone call from a PR director at TikTok, the popular social media app. I’d written extensively about the company for the Financial Times, so we’d spoken before. But it was puzzling to hear from her just before the holidays, especially since I wasn’t working on anything related to the company at the time.

The call lasted less than a minute. She wanted me to know, “as a courtesy,” that The New York Times had just published a story I ought to read. Confused by this unusual bespoke news alert, I asked why. But all she said was that it concerned an inquiry at ByteDance, TikTok’s Chinese parent company, and that I should call her back once I’d read it.

The story claimed ByteDance employees accessed two reporters’ data through their TikTok accounts. Personal information, including their physical locations, had been used as part of an attempt to find the writers’ sources, after a series of damaging stories about ByteDance. According to the report, two employees in China and two in the US left the company following an internal investigation. In a staff memo, ByteDance’s chief executive lamented the incident as the “misconduct of a few individuals.”