Domino’s India data breach allegedly exposes 1 million credit card details, 180 million order details

• The Domino’s India data breach allegedly includes data of 1 million credit cards and 180 million orders.
  
• According to security researchers, the reseller is demanding 10 Bitcoin – approximately $5,70,000 – for the 13TB database.
  
• The database contains mobile numbers, name, home address and more.
  

Domino’s India, the popular American multinational pizza restaurant chain, is allegedly the latest victim of a data breach. The Domino’s data breach has exposed 1 million credit card details along with 180 million order details.

According to Alon Gal, security researcher and Chief Technology Officer of cybersecurity firm Hudson Rock, the reseller is demanding 10 Bitcoin, which is approximately $570,000 for the complete database, which is 13TB in size.


Additionally, Gal also says that the hacker has plans to build a search portal similar to the MobiKwik one, allowing anyone to enter a search string to confirm the existence of those details.

The database includes details like mobile numbers, names, home addresses, payment type and social login tokens.

Rajashekhar Rajaharia, another security researcher, also confirmed the breach, along with a data tree that reveals all the details that have been accessed by the hackers.

Apart from the data of Domino’s India’s users and orders, the hacker also got access to data of 250 employees of the company across different departments like IT, Legal, Finance among others.

Rajaharia has confirmed to Business Insider that this is the same hacker who breached MobiKwik earlier last month. He says that the hacker sold the database to a reseller who has now posted the details on the dark web.

Domino’s India data breach exacerbates security concerns plaguing Indian companies

Domino’s India won’t be the last Indian company to be hacked, but it highlights the endless stream of Indian companies facing security concerns.

Earlier last month, MobiKwik was reportedly hacked, exposing data of 3.5 million users. While the company denied it, it ordered a forensic audit post-fact.

Prior to it, Juspay, BigBasket, Unacademy and others were also breached.

India’s unicorn startups, power sector and others like Jio are amongst the prime targets for Chinese hackers.

SEE ALSO:

The company that processes payments for Amazon and Swiggy has reported a data leak of over 100 million debit and credit cardholders

The Chinese cyber threat is real — and India’s best defence right now is to keep its outage time limited

After Jio, India's unicorn startups are the top target for Chinese hackers trying to get their hands on Indian users' data