Best printers for Home

Best Mixer Grinder

Best wired Earphones

Best 43 Inch TV in India

Best Wi Fi Routers

Best Home Theatre in India

Smart Watch under 5000

Best Laptops for Education

Best Laptop for Students

<ul><li><keyword id="3489555" type="PERSON" weightage="20" keywordseo="upstox">Upstox</keyword>, the second largest stock broker in India, has suffered a massive data breach.</li><li>This breach has exposed user data like Aadhaar, PAN, bank account numbers and more.</li><li>While Upstox did not comment on the data leak, it said it has upgraded its security systems ‘manifold’ on the recommendations of a global cyber-security firm.</li></ul> Popular discount broker Upstox has suffered a massive data breach that has exposed some important data like Aadhaar, PAN and bank account numbers, apart from other personally identifiable information like mobile numbers and email addresses. Upstox is a Delhi-based discount stock broker that allows its customers to buy and sell shares. It is backed by Tiger Global and has over <a href="https://economictimes.indiatimes.com/markets/stocks/news/what-made-upstox-indias-second-largest-stockbroker-after-zerodha/articleshow/78745921.cms">1 million customers</a>. “We have upgraded our security systems manifold recently, on the recommendations of a global cyber-security firm. We brought in the expertise of this globally renowned firm after we received emails claiming unauthorised access into our database,” Upstox <a href="https://upstox.com/announcements/customer-support/security-measures/">said</a> on its website, reacting to reports of the data breach. The company said that despite the data breach, the funds and shares of its customers are safe. This is for two reasons – funds in your Upstox account can only be withdrawn to the linked bank account, and the shares are held with the depositories – either Central Depositories Services India Ltd (CDSL) or National Securities Depository Ltd (NSDL) – and not with Upstox. With that being said, Upstox users have other things to be worried about. Security researcher Rajshekhar Rajaharia, who <a href="https://www.businessinsider.in/tech/news/over-100-million-debit-and-credit-card-users-data-has-been-leaked-online-from-payments-processor-juspay-amazon-and-swiggy/articleshow/80096472.cms">had earlier tipped Business Insider about Juspay</a> and MobiKwik data breaches, told us that the <keyword id="11082460" type="UNKNOWN" weightage="20" keywordseo="Upstox-data-breach">Upstox data breach</keyword> includes Aadhaar, PAN, passport, bank account numbers, mobile numbers and even the photos of signatures. This data could be used by hackers or malicious parties to impersonate users and transact on their behalf without the users’ knowledge. According to Rajaharia, the Upstox data breach was executed due to a compromised Amazon Web Service (AWS) key used by the company. He says that the same AWS key vulnerability was exploited in the MobiKwik data breach as well. Rajaharia shared a data sample with us – the sample revealed user details as reported in the breach. However, we could not verify the authenticity of the sample. The hacking group, ShinyHunter, has taken down the data for now. Upstox is the latest in Indian companies being targeted by hackers The Upstox data breach is the latest in a string of Indian companies being hacked – the most recent ones were MobiKwik, Juspay, ClickIndia, ChqBook, WedMeGood, among others. However, this time around, the Upstox data breach could be a result of its own folly. SEE ALSO: <a href="https://www.businessinsider.in/tech/news/over-100-million-debit-and-credit-card-users-data-has-been-leaked-online-from-payments-processor-juspay-amazon-and-swiggy/articleshow/80096472.cms">The company that processes payments for Amazon and Swiggy has reported a data leak of over 100 million debit and credit cardholders</a> <a href="https://www.businessinsider.in/tech/news/these-were-the-biggest-cyber-attacks-of-2020/slidelist/79941232.cms">From FireEye to Twitter to Covid-19 vaccine research ⁠— these were the biggest cyber attacks of 2020</a>

Discount broker Upstox suffers data breach – Aadhaar, PAN and bank account numbers leaked

<ul><li>The <keyword id="158137" type="COMPANY" weightage="20" keywordseo="Domino">Domino</keyword>’s India data breach allegedly includes data of 1 million credit cards and 180 million orders. </li><li>According to security researchers, the reseller is demanding 10 Bitcoin – approximately $5,70,000 – for the 13TB database. </li><li>The database contains mobile numbers, name, home address and more. </li></ul>Domino’s India, the popular American multinational pizza restaurant chain, is allegedly the latest victim of a data breach. The Domino’s data breach has exposed 1 million credit card details along with 180 million order details. According to <a href="https://twitter.com/UnderTheBreach/status/1383673094963822597">Alon Gal</a>, security researcher and Chief Technology Officer of cybersecurity firm Hudson Rock, the reseller is demanding 10 Bitcoin, which is approximately $570,000 for the complete database, which is 13TB in size. <div type="twitter" handle="UnderTheBreach" handlename="Alon Gal (Under the Breach)" image="http://pbs.twimg.com/profile_images/1364107350748053512/VFKQXcPJ_normal.jpg" favoritecount="271" retweetcount="154" status="Threat actor claiming to have hacked Domino's India (@dominos) and stealing 13TB worth of data.Information includ… https://t.co/ayn9de8hgf" createdat="1618728347000" id="1383673094963822597"></div> Additionally, Gal also says that the hacker has plans to build a search portal similar to the MobiKwik one, allowing anyone to enter a search string to confirm the existence of those details. The database includes details like mobile numbers, names, home addresses, payment type and social login tokens. Rajashekhar Rajaharia, another security researcher, also <a href="https://twitter.com/rajaharia/status/1384079086927052801">confirmed</a> the breach, along with a data tree that reveals all the details that have been accessed by the hackers. Apart from the data of Domino’s India’s users and orders, the hacker also got access to data of 250 employees of the company across different departments like IT, Legal, Finance among others. Rajaharia has confirmed to Business Insider that this is the same hacker who breached MobiKwik earlier last month. He says that the hacker sold the database to a reseller who has now posted the details on the dark web. Domino’s India data breach exacerbates security concerns plaguing Indian companies Domino’s India won’t be the last Indian company to be hacked, but it highlights the endless stream of Indian companies facing security concerns. Earlier last month, MobiKwik was reportedly hacked, exposing data of 3.5 million users. While the company <a href="https://www.businessinsider.in/business/startups/news/mobikwik-ceo-orders-a-forensic-audit-after-denying-any-data-leak-from-its-digital-wallet/articleshow/81759461.cms">denied it</a>, it ordered a forensic audit post-fact. Prior to it, Juspay, BigBasket, Unacademy and others were also breached. India’s unicorn startups, <a href="https://www.businessinsider.in/defense/news/the-chinese-cyber-threat-is-real-and-indias-best-defence-right-now-is-to-keep-its-outage-time-limited/articleshow/81981886.cms">power sector</a> and others like Jio are amongst the prime targets for Chinese hackers. SEE ALSO: <a href="https://www.businessinsider.in/tech/news/over-100-million-debit-and-credit-card-users-data-has-been-leaked-online-from-payments-processor-juspay-amazon-and-swiggy/articleshow/80096472.cms">The company that processes payments for Amazon and Swiggy has reported a data leak of over 100 million debit and credit cardholders</a> <a href="https://www.businessinsider.in/defense/news/the-chinese-cyber-threat-is-real-and-indias-best-defence-right-now-is-to-keep-its-outage-time-limited/articleshow/81981886.cms">The Chinese cyber threat is real — and India’s best defence right now is to keep its outage time limited</a> <a href="https://www.businessinsider.in/tech/news/after-jio-swiggy-paytm-ola-and-byjus-and-other-startups-on-target-of-chinese-hackers/articleshow/77497819.cms">After Jio, India's unicorn startups are the top target for Chinese hackers trying to get their hands on Indian users' data</a>

Domino’s India data breach allegedly exposes 1 million credit card details, 180 million order details

Welcome to our new Payments Insights newsletter, a morning email with the top news and analysis on the digital payments industry, produced by <a href="https://intelligence.businessinsider.com/welcome?utm_source=House&amp;utm_medium=Edit&amp;utm_term=PINSIGHTSutm_content=link&amp;utm_campaign=BIIMobile" target="_blank">BI Intelligence</a>. 
<a href="http://e.businessinsider.com/join/biipaymentsform" target="_blank">Click here to sign up for Payment Insights today, and receive it every morning in your inbox</a>.

<div class="KonaFilter image-container float_right click-to-enlarge" style="width:400px"><div class="image"><a title_source="Flickr/nateOne" title_caption="" class="zoomin" href="http://static6.businessinsider.com/image/51114c7169beddc04d000004-960/target-18.jpg"></a><a href="http://www.flickr.com/photos/nateone/3519404549/">Flickr/nateOne</a></div></div>MASSIVE FRAUD AT TARGET SPOTLIGHTS WEAKNESSES IN THE LEGACY OF PAYMENTS INDUSTRY: Yesterday Target confirmed that it had suffered a huge security breach at its stores between November 27th and December 15th (of course that span of time included Black Friday, one of the biggest offline shopping days of the year). 
The breach may have affected 40 million credit and debit cards. As Business Insider's Jim Edwards pointed out in an article yesterday, the notable fact about the work of these hackers is that they exposed credit cards used at Target stores, not at Target.com. (<a href="http://pressroom.target.com/news/target-confirms-unauthorized-access-to-payment-card-data-in-u-s-stores" target="_blank">Target</a>) 
Despite the fear that e-commerce and mobile commerce sites are most vulnerable to cyber criminals, traditional point-of-sale systems like those used at large retailers can also be hacked and are susceptible to security failures that create huge losses and frustrations for themselves, their consumers, and credit card companies.
IF IT CAN HAPPEN TO TARGET, IT CAN HAPPEN TO ANYBODY: As American Banker writes, "if Target can't protect itself from a data breach, how can any retailer hope to do so? "Target had state-of-the-art security systems and was an early adopter of EMV cards or "chip cards," which are widely used in Europe, and are more difficult to steal data from. Magnetic strip cards are a much easier target for fraudsters. "Stolen data from a magnetic-stripe card can be written to any other type of card, even a hotel room key, and used to make swiped card payments." But EMV cards face a chicken-and-egg problem. Many consumers don't have them, which in turn, is why many retailers don't adopt compatible point-of-sale systems. (<a href="http://www.americanbanker.com/issues/178_243/target-breach-sends-chills-is-any-merchant-safe-even-with-emv-1064461-1.html" target="_blank">American Banker</a>)
In other news...
Airlines are leading the way to mobile payments: Twenty-five percent of airlines now allow customers to buy tickets from mobile apps, up from 10% last year. Of the 56 global airlines surveyed, 57% said that they expected that mobile would be that technology that drove the most new revenue in the next two years. <a href="http://www.mobilecommercedaily.com/25pc-of-airlines-accept-mobile-payments-report" target="_blank">(Mobile Commerce Daily)</a>
A new report from Forrester argues that financial institutions that do not take the plunge into the world of mobile wallets are at risk of becoming irrelevant in face of new competitors like PayPal, Amazon, and Square. <a href="http://www.mobilepaymentstoday.com/article/225083/Will-non-banks-own-digital-wallets" target="_blank">(Mobile Payments Today) </a>
A majority of respondents in India, Indonesia, Philippines, Vietnam, Kenya, Nigeria, and South Africa said they felt comfortable investing in Bitcoin, according to a new survey from Jana. The survey also covered Brazil and Mexico, where less than a majority felt comfortable investing in the digital currency. <a href="http://venturebeat.com/2013/12/19/this-is-what-people-in-9-emerging-markets-think-about-bitcoin-survey/" target="_blank">(Venture Beat) </a>
PayPal has completed its $800 million acquisition of Braintree. Braintree will continue as a separate service, but merchants can expect to see PayPal features within Braintee's applications in 2014. <a href="https://www.paypal-forward.com/leadership/braintree-has-officially-joined-paypal/" target="_blank">(PayPal)</a> 
HSBC has made a deal with HKT, a Hong Kong- based telecom, to offer customers a NFC mobile wallet. HSBC has reportedly made similar deals with three other Hong Kong-based telecoms as well. <a href="http://www.pccw.com/About+PCCW/Media+Center/Press+Releases/Detail?guid=385455e68c003410VgnVCM1000006a8ba8c0____&amp;language=en_US" target="_blank">(HKT)</a>
WELCOME TO PAYMENTS INSIGHTS. This is our new newsletter covering all things payments. Don't forget to <a href="http://e.businessinsider.com/join/biipaymentsform" target="_blank">sign up</a> and get it every morning in your inbox. Please email <a href="mailto:johnh@businessinsider.com">johnh@businessinsider.com</a> or BI Intelligence director <a href="mailto:mballve@businessinsider.com" target="_blank">mballve@businessinsider.com</a> with news and tips.
"We'll seek to follow the mainstream. Bitcoins are not forbidden in the U.S. and the U.K. It is out there and will continue to be out there. It just needs to be regulated." says Michael Landberg, chief legal adviser at the Financial Supervisory Authority in Denmark. <a href="http://www.paymentssource.com/news/bitcoins-spark-regulatory-crackdown-as-denmark-drafts-rules-3016370-1.html" target="_blank">(Paymentssource)</a>
MasterCard plans to expand its online payments portal, MasterPass, into Italy in early 2014. The service allows consumers to pay for goods online with a simple log in rather than filling out billing information. MasterPass is already available in North America and much of Western Europe. <a href="http://newsroom.mastercard.com/press-releases/masterpass-digital-payment-platform-launches-in-italy/" target="_blank">(MasterCard)</a>
MobiKwik an Indian mobile wallet start-up reported a million downloads. In November of last year the company had reported 100,000 downloads. <a href="http://blog.mobikwik.com/joining-the-million-club-mobikwik-android-app/" target="_blank">(MobiKwik)</a>
What subscribers are reading on BI Intelligence ...
[CHART] <a href="http://e.businessinsider.com/521df5d31e240a9c3f3102401dffc.33/UrQ8mOYQefhn571aBb699" target="_blank">LinkedIn's Desktop-Based Usage In The U.S. Is Frighteningly Low</a>
[CHART] <a href="http://e.businessinsider.com/521df5d31e240a9c3f3102401dffc.33/UrQ8mOYQefhn571ZBc0c0" target="_blank">The Number Of Smart TV Devices On Earth Will Reach 400 Million In 2014, But They're Overlooked As App Platforms</a>
[CHART] <a href="http://e.businessinsider.com/521df5d31e240a9c3f3102401dffc.33/UrLt1uYQKbLud3SSB66ed" target="_blank">More People Use The Facebook App Than Google Search App On Smartphones In The U.S.</a>
[CHART] <a href="http://e.businessinsider.com/521df5d31e240a9c3f3102401dffc.33/UrGWZeYQMhH5JeNbBd93a" target="_blank">Nearly Half The World's Internet Users Are Active On Facebook Each Month, One-Fifth Use YouTube</a>
[CHART] <a href="http://e.businessinsider.com/521df5d31e240a9c3f3102401dffc.33/UrGWZeYQMhH5JeNaB91b2" target="_blank">Mobile Drives One In Four Visits To E-Commerce Sites, With Tablets Driving More Traffic Than Smartphones</a> 
[REPORT] <a href="http://e.businessinsider.com/521df5d31e240a9c3f3102401dffc.33/Uq81VTtu_uhr_qihBcd0b" target="_blank">A Social Engagement Primer: A Portrait Of Time-Spend And Activity On The Top Social Networks</a>
[CHART] <a href="http://e.businessinsider.com/521df5d31e240a9c3f3102401dffc.33/UrBJy-YQhtDM_gGwBa97b" target="_blank">LINE Provides A Great Example Of How Mobile Messaging Apps Can Make Money</a>
[CHART] <a href="http://e.businessinsider.com/521df5d31e240a9c3f3102401dffc.33/Uq71lztu_uhr_qXhBf0a9" target="_blank">The Average Global Internet User Spends Two And A Half Hours Daily On Social Media</a>
[CHART] <a href="http://e.businessinsider.com/521df5d31e240a9c3f3102401dffc.33/Uq71lztu_uhr_qXiB5d25" target="_blank">The Global Smartphone Market Is Still Accelerating, And Will End The Year Just Shy Of 1 Billion Units Shipped</a>

Target's Data Breach Nightmare Reveals The Vulnerability Of Traditional Point-Of-Sale Systems

<ul><li><keyword id="4009819" type="PERSON" weightage="20" keywordseo="Amazon-Pay">Amazon Pay</keyword>, <keyword id="18635" type="CITY" weightage="20" keywordseo="Amazon">Amazon</keyword> <keyword id="418872" type="PERSON" weightage="20" keywordseo="digital-wallet">digital wallet</keyword> in <keyword id="3658" type="COUNTRY" weightage="20" keywordseo="India">India</keyword>, is rolling out user verification (KYC) for its customers.</li><li>Reportedly submitting biometrics using <keyword id="144117" type="ORGANIZATION" weightage="20" keywordseo="AADHAAR">Aadhaar</keyword> credentials is a faster process for verification than other physical documents. </li><li>But concerns related to Aadhaar aren’t about its convenience, but about its security.</li></ul>Amazon Pay is the next digital wallet to roll out physical customer verification — but there’s a catch. If you use your <keyword id="6356006" type="UNKNOWN" weightage="20" keywordseo="Aadhaar-card">Aadhaar card</keyword> for verification, the process is a lot quicker than if you other methods of verification — passport, drivers license, voter ID, or bank statements. It’s not really Amazon’s fault because the biometric verification through Aadhar is simple matter of verifying your fingerprint through a fingerprint reader. But, with other physical documents, the company needs people on the ground to verify the authenticity of the documents. Simply put, the verification through Aadhaar is a lot cheaper for Amazon as compared to using other documents for physical verification. Amazon Pay and other digital wallets have to enforce user verification in line with the Reserve Bank of India’s new policy on data localisation. Not an Amazon-specific problem India’s central bank, the Reserve Bank of India, rolled out its data localisation policy rendering 95% of mobile wallets in the country vulnerable to being shut down. The directive of the policy makes it mandatory for all digital wallets to have biometrics or physical customer verification in place. Even PayTM nudged its users into adopting KYC in order to continue using their wallets. If your PayTM account isn’t verified, you can still receive payments from other users and make payments at retail outlets using the QR-code but you can’t send out money to other users directly. Other digital wallets like MobiKwik have shifted to diversifying themselves because they haven’t been able to push their customers towards KYC norms with RBI’s February deadline coming up. The case with Aadhaar India’s top court has already ruled that private companies can’t make it ‘mandatory’ for Aadhaar to be the only method of user verification. But that doesn’t negate it as an option. The issue that people are facing with Aadhaar isn’t whether or not it’s convenient, but whether or not it’s safe. The series of data breaches associated with the Aadhaar system didn’t happen through actual government database, but through third-party organisations that were using Aadhaar information as user identification. A <a href="https://timesofindia.indiatimes.com/india/80-people-concerned-about-aadhaar-data-security-study/articleshow/64382747.cms">study </a>by Velocity MR estimates that as many as 80% of respondents in India are concerned about data security when it comes to giving out their Aadhaar card information anywhere. It’s not just about identity theft but information being leaked that leads to customers being spammed over text and email — or even phished. This is probably why Amazon is looking to roll out its own Unified Payments Interface (<keyword id="6358921" type="ORGANIZATION" weightage="20" keywordseo="upi">UPI</keyword>) because, in that case, KYC isn’t mandatory for setting up an account. The verification done by the respective banks is enough. See also: <a href="https://www.businessinsider.in/in-india-amazons-fight-is-not-just-with-flipkart-but-with-paytm-google-pay-and-truecaller/articleshow/67456165.cms">In India, Amazon's fight is not just with Flipkart, but with PayTM, Google Pay and Truecaller</a> <a href="https://www.businessinsider.in/indian-government-portal-leaks-8-9mn-aadhaar-details-again/articleshow/63924186.cms">Indian government portal leaks 8.9mn Aadhaar details, again</a> <a href="https://www.businessinsider.in/supreme-court-clarifies-that-aadhar-isnt-mandatory-for-a-new-sim-connection/articleshow/63928188.cms">Supreme Court clarifies that Aadhar isn’t mandatory for a new SIM connection</a>

You Searched For "Mobikwik Data Breach" and got 4 results

Discount broker Upstox suffers data breach – Aadhaar, PAN and bank account numbers leaked

Rounak Jain

Domino’s India data breach allegedly exposes 1 million credit card details, 180 million order details

Rounak Jain

Target's Data Breach Nightmare Reveals The Vulnerability Of Traditional Point-Of-Sale Systems

John Heggestuen

This is why Amazon wants your Aadhaar number

Prabhjote Gill

Popular Keywords

Buying Guides