Monday, November 9, 2020

BigBasket Data Breach: Personal Details of Over 2 crore Users Sold on Dark Web

In shocking news, Bengaluru-based online grocery company Big Basket is allegedly facing data breach. The big data breach has resulted in personal details of over 2 crores users leaked. According to security firm Cyble, a hacker has allegedly put the data on sale for around Rs 30 lakh. The Bengaluru-based company is funded by Alibaba Group, Mirae Asset-Naver Asia Growth Fund, and the UK government-owned CDC group. The brand has filed a police complaint with the Cyber Crime Cell in Bengaluru. Here’s what you need to know about the latest data breach of BigBasket.

BigBasket Data Breach details

As per Cyble, the hacker has put the leaked data of over 2 crore users on sale on Dark Web. The size of the SQL file is about 15GB and the hacker is asking for over Rs 30 lakh to sell the data. The latest data breach includes full names, email IDs, password hashes (potentially hashed OTPs), pin, contact numbers (mobile + phone), full addresses, date of birth, location, and IP addresses of login among many others.

“In the course of our routine Dark web monitoring, the Research team at Cyble found the database of Big Basket for sale in a cyber-crime market, being sold for over $40,000. The leak contains a database portion; with the table name ‘member_member’. The size of the SQL file is ~ 15 GB, containing close to 20 Million user data,” the expert in a blog post.

BigBasket said that the privacy and confidentiality of customers is its priority. The company has filed a police complaint on this matter. Moreover, it is also looking for the claim made by the security firm. “The only customer data that we maintain are email IDs, phone numbers, order details, and addresses so these are the details that could potentially have been accessed. We have a robust information security framework that employs best-in-class resources and technologies to manage our information. We will continue to proactively engage with best-in-class information security experts to strengthen this further,” Bigbasket said in a statement.

The post BigBasket Data Breach: Personal Details of Over 2 crore Users Sold on Dark Web appeared first on MySmartPrice.



from MySmartPrice https://ift.tt/3lch0Sd

No comments:

Post a Comment