India’s Largest Cyber Breaches

Customers can receive information about their most recent transactions and account balance via text texts thanks to SBI Quick, a free service. The customers received over 3 million SMS messages.

The data includes

a)      Names,

b)      Mobile Numbers,

c)       Email IDs,

d)      Date of Birth,

e)      Gender, and

f)       Addresses.

It was revealed by an independent security researcher in a Facebook post.

The hack was carried out in China, and Fallensky519 is the name of the hacking gang, according to FireEye. Moreover, the cyber group offered some patient and doctor information for USD 2000 while selling healthcare records on the dark web.

a)      Facebook,

b)      Blume Ventures, and

c)       Sequoia India.

The business acknowledged that a cyberattack had compromised the accounts of 22 million individuals who had registered on its website.

Data such as usernames, email addresses, and passwords were listed for sale on the dark web, according to Cyble, a cyber security company.

Additionally, a portion of a database containing the private information of almost 20 million customers was offered for USD 40,000.

On November 1, Cyble notified BigBasket of the security issue and verified the data that was being offered for sale by BigBasket.

The data included

a)      Names,

b)      PINs,

c)       Mobile Numbers,

d)      Email IDs,

e)      Date of Birth,

f)       IP Addresses, and

g)      Locations.

An unrecycled access key was used to breach the data. According to cyber security researcher Rajshekhar Rajaharia, the data was planned for sale on the dark web for USD 5000.

The hacked PDF reports appeared on Google, as was initially reported by BleepingComputer. Government websites using the “gov.in” and “nic.in” domains hosted these PDF files. These agencies were later discovered to be in New Delhi.

Names, DOBs, test dates, and the testing facility were among the information that was exposed. Additionally, the URL structures revealed that the CMS system, on which the reports were placed, was the same one that the government uses to post publicly accessible papers.

Niamh Muldoon, senior director of OneLogin, stated that what is happening in this situation is the failure to train people on how to develop software, test it, and then use it as platforms to run and store information, such as patient data.

He continued by saying that the government needed to engage in security programs with reputable security platform suppliers and quickly implement safety measures to reduce the likelihood of future data breaches.

It was tranced by the threat intelligence company CloudSEK. The information was linked to a police exam that was given in India on December 22, 2019.

More than 10,000 candidates’ data were provided to CouldSEK by the seller.

The data shared included

a)      Names,

b)      DOB,

c)       Email IDs,

d)      Mobile Numbers,

e)      FIR records along with the criminal history of the candidates.

The majority of the candidates were from Bihar, as was later discovered after the study of the stolen data. The leaked data was confirmed to be accurate when the threat-intel firm linked the mobile number with the candidate names.

Financial service providers acquired the data to check customers’ identities and stop money laundering and fraud because hackers could exploit it to steal their identities.

On April 11, the business notified the client that they will change their passwords and take other safety precautions as soon as they received notice in an email that contact and KYC data housed in a third-party warehouse may have been compromised.

Later, Upstox issued an apology to its clients and informed them that they had informed the improved securities of the occurrence. Upstox also announced an expansion of their bug bounty program in order to find ethical hackers who would test the system.

Alon Gal, the CTO of the cyberintelligence company Hudson Rock, disclosed it. He added that someone had requested 10 bitcoin, which cost Rs 4 crore and contained 13 gigabytes of information, including the credit card information for 1 million people and information on 180 million pizza orders.

Names, email addresses, and contact information were all included in the data. Alon Gal shared the screenshot of the hackers claiming to have information on over 250 Domino’s India employees as well as access to their Outlook mail going back to 2015.

Domino’s India’s parent company, Jubilant Foodworks, informed IANS of the information security incident, but disputed that their customers’ financial information was also compromised because they don’t keep credit card information on file.

The stolen information was gathered between August 2011 and February 2021. Moreover, the airline data servicer supplier SITA disclosed the incident. It wasn’t until March that passengers learned about the tragedy.

Air India was not the only airline impacted by the attack on SITA’s passenger service system; other airlines included

a)      Lufthansa,

b)      Cathay Pacific, and

c)       Malaysia Airlines.