HONG KONG--China’s internet watchdog on Thursday fined ride-hailing firm Didi Global more than 8 billion yuan ($1.2 billion) following an investigation into the company’s cybersecurity practices.

The third largest exposed dataset, with over 25 million records, was credited to China’s largest courier service, SF Express. The researchers discovered tens of thousands of leaked records titled ...