Best printers for Home

Best Mixer Grinder

Best wired Earphones

Best 43 Inch TV in India

Best Wi Fi Routers

Best Home Theatre in India

Smart Watch under 5000

Best Laptops for Education

Best Laptop for Students

New Delhi, After hacking masked credit and debit card data of crores of Juspay users, the same hacker possibly known as '<keyword id="9206309" type="COMPANY" weightage="20" keywordseo="shinyhunters">ShinyHunters</keyword>' is now selling databases belonging to three more Indian companies on <keyword id="1929208" type="COMPANY" weightage="20" keywordseo="dark-web">Dark Web</keyword>, independent cyber security researcher Rajshekhar Rajaharia claimed on Wednesday. According to Rajaharia who first broke the JusPay hacking, the three Indian companies are e-marketplace <keyword id="2901238" type="COMPANY" weightage="20" keywordseo="Clickindia">ClickIndia</keyword>, <keyword id="2461546" type="DOMAIN" weightage="20" keywordseo="FinTech">fintech</keyword> startup for small business owners ChqBook and wedding planning website WedMeGood. "Nearly 80 lakh users of ClickIndia (name, email, mobile and other personal details), 10 lakh users of ChqBook (name, email, mobile, full address and other personal details) and 13 lakh users of WedMeGood (name, email, hashed password, other sensitive personal information)," Rajaharia told. Like JusPay, these three companies have also not allegedly told the users about the data breach, claimed the security researcher. The names of the three Indian companies were first reported by BleepingComputer website, saying that a "data breach broker is selling the allegedly stolen user records for 26 companies on a hacker forum". ChqBook denied the attack while the other two companies were yet to react to the report. According to <keyword id="10553252" type="UNKNOWN" weightage="20" keywordseo="sonit-jain">Sonit Jain</keyword>, CEO of <keyword id="9727813" type="COMPANY" weightage="20" keywordseo="gajshield-infotech">GajShield Infotech</keyword>, such incidents, once confirmed irrespective of data sensitivity, leaves a negative impression over the digital payment platforms. "Simple data like email ID and phone number which may not look sensitive can turn out to be lethal means of financial fraud at personal level, if fallen in wrong hands," Jain told. Bengaluru-based digital payments gateway JusPay said in an earlier statement that the company verified that their Secure Data Store, which hosts the confidential card numbers, was not accessed or compromised. "Thus, all our customers were secure from any kind of risk. Our priority was to inform the merchants and as a measure of abundant precaution, they were issued fresh API keys though it was later verified that even the API keys in use were safe," the company said. According to Rajaharia, the hacker is the same who leaked <keyword id="964794" type="COMPANY" weightage="20" keywordseo="BigBasket">BigBasket</keyword> data, previously reported by the cybersecurity firm Cyble. In November last year, one of India's popular online grocery stores BigBasket, found that its data of over 20 million users had been hacked and were on sale on the dark web for over $40,000. "Now, the same hacker group is asking about $10,000 in Bitcoin for the BigBasket database and is also selling the three companies' databases," Rajaharia said. "There is a strong connection between all these recent data leaks, including BigBasket," he added. US-based third-party cyber intelligence firm Cyble claimed in its official blog that though the alleged breach occurred on October 14, it detected it on October 30, validated it on October 31 and informed BigBasket on November 1. The user database was estimated to be about 20 million, with names, email ids, password hashes, pin, contact numbers, addresses, date of birth, location and IP addresses of login. JusPay on Tuesday said that about 3.5 crore records with masked card data and card fingerprint were compromised by the hacker and the claim of 10 crore cardholders' data being affected is "incorrect". SEE ALSO: <a href="https://www.businessinsider.in/business/startups/news/boat-raises-over-100-million-from-warburg-pincus-analysts-expect-the-headphone-brand-to-double-its-revenue-to-10-billion-this-financial-year/articleshow/80126200.cms">boAt raises over $100 million from Warburg Pincus — analysts expect the headphone brand to double its revenue to ₹10 billion this financial year</a> <a href="https://www.businessinsider.in/tech/news/oneplus-fitness-band-india-launch-date-price-and-everything-you-need-to-know/articleshow/80129498.cms">OnePlus Band India launch date, price and everything you need to know</a> <a href="https://www.businessinsider.in/tech/apps/news/whatsapp-will-stop-working-if-you-do-not-agree-to-its-new-terms-and-privacy-policies/articleshow/80127866.cms">WhatsApp will stop working if you do not agree to its new terms and privacy policies</a> <a href="https://www.businessinsider.in/business/auto/news/toyota-fortuner-suv-2021-launched-in-india-with-new-price-design-and-features-check-details-here/articleshow/80129932.cms">Toyota Fortuner 2021 launched at a starting price of ₹29.98 lakh — here’s all you need to know from looks to specification and features</a>

After Juspay, ClickIndia, ChqBook and WedMeGood have been reportedly hacked — data of over 10 million users up for sale on the dark web

New Delhi, A hacker that goes by the name of <keyword id="9206309" type="UNKNOWN" weightage="20" keywordseo="shinyhunters">ShinyHunters</keyword> has now leaked data of 2.28 million users of a dating <keyword id="10649183" type="UNKNOWN" weightage="20" keywordseo="website-meetmindful">website MeetMindful</keyword> that includes real names, Facebook account tokens, email addresses and geo-location information. According to a report in ZDNet, the leaked <keyword id="14345" type="PERSON" weightage="20" keywordseo="Date">date</keyword> in a 1.2GB file has been shared as a free download on a publicly accessible hacking forum. "The content of this file includes a wealth of information that users provided when they set up profiles on the MeetMindful site and mobile apps," said the report citing a cyber security research on Sunday. The leaked data also includes body details, dating preferences, marital status, birth dates, IP addresses and Bcrypt-hashed account passwords. The message on the website reads: "This website is using a security service to protect itself from online attacks". MeetMindful was founded in 2014. For several MeetMindful users, the leaked data can be used to trace their dating profiles back to their real-world identities. The data is still available for download on the public file-hosting site where it was initially uploaded. Several hackers have been engaged in sextortion where they contact dating site users, threatening to expose their profiles to family unless they pay a ransom. ShinyHunters has been involved in several data breaches recently, including allegedly leaking sensitive data of nearly 3.25 lakh users of Delhi-NCR based global cryptocurrency exchange and wallet, BuyUcoin, on the Dark Web. ShinyHunters has also leaked 1.9 million (19 lakh) user records stolen from free online photo editing application Pixlr. According to cyber security experts, the hacker is the same who earlier leaked BigBasket and JusPay data in <keyword id="3658" type="LOCATION" weightage="20" keywordseo="India">India</keyword>. Three other Indian companies -- e-marketplace ClickIndia, <keyword id="2461546" type="DOMAIN" weightage="20" keywordseo="FinTech">fintech</keyword> startup for small business owners ChqBook and wedding planning website WedMeGood -- were also breached possibly by the same hacker. SEE ALSO: <a href="https://www.businessinsider.in/business/auto/news/an-american-electric-car-maker-explains-why-it-took-a-different-route-than-elon-musks-tesla-tata-motors-or-mahindra/articleshow/80442243.cms?upcache=2">An American electric car maker explains why it took a different route than Elon Musk’s Tesla, Tata Motors or Mahindra</a> <a href="https://www.businessinsider.in/tech/mobile/news/new-realme-stores-in-india-and-ceo-says-there-is-plan-for-new-devices/articleshow/80443801.cms">EXCLUSIVE: Realme plans to open 500 new stores in 2021⁠— the CEO reveals the company will go beyond smartphones in the 5G era</a> <a href="https://www.businessinsider.in/budget/news/indias-co-working-sector-wants-recognition-under-real-estate-tax-benefits-as-flexible-workspaces-aim-for-a-significant-revival-in-the-post-covid-era/articleshow/80431768.cms">India’s co-working sector wants recognition under real estate, tax benefits as flexible workspaces aim for a significant revival in the post-COVID era</a>

Dating site MeetMindful hacked — data of over 2 million users leaked including Facebook details and geo-location

<ul><li><keyword id="3489555" type="PERSON" weightage="20" keywordseo="upstox">Upstox</keyword>, the second largest stock broker in India, has suffered a massive data breach.</li><li>This breach has exposed user data like Aadhaar, PAN, bank account numbers and more.</li><li>While Upstox did not comment on the data leak, it said it has upgraded its security systems ‘manifold’ on the recommendations of a global cyber-security firm.</li></ul> Popular discount broker Upstox has suffered a massive data breach that has exposed some important data like Aadhaar, PAN and bank account numbers, apart from other personally identifiable information like mobile numbers and email addresses. Upstox is a Delhi-based discount stock broker that allows its customers to buy and sell shares. It is backed by Tiger Global and has over <a href="https://economictimes.indiatimes.com/markets/stocks/news/what-made-upstox-indias-second-largest-stockbroker-after-zerodha/articleshow/78745921.cms">1 million customers</a>. “We have upgraded our security systems manifold recently, on the recommendations of a global cyber-security firm. We brought in the expertise of this globally renowned firm after we received emails claiming unauthorised access into our database,” Upstox <a href="https://upstox.com/announcements/customer-support/security-measures/">said</a> on its website, reacting to reports of the data breach. The company said that despite the data breach, the funds and shares of its customers are safe. This is for two reasons – funds in your Upstox account can only be withdrawn to the linked bank account, and the shares are held with the depositories – either Central Depositories Services India Ltd (CDSL) or National Securities Depository Ltd (NSDL) – and not with Upstox. With that being said, Upstox users have other things to be worried about. Security researcher Rajshekhar Rajaharia, who <a href="https://www.businessinsider.in/tech/news/over-100-million-debit-and-credit-card-users-data-has-been-leaked-online-from-payments-processor-juspay-amazon-and-swiggy/articleshow/80096472.cms">had earlier tipped Business Insider about Juspay</a> and MobiKwik data breaches, told us that the <keyword id="11082460" type="UNKNOWN" weightage="20" keywordseo="Upstox-data-breach">Upstox data breach</keyword> includes Aadhaar, PAN, passport, bank account numbers, mobile numbers and even the photos of signatures. This data could be used by hackers or malicious parties to impersonate users and transact on their behalf without the users’ knowledge. According to Rajaharia, the Upstox data breach was executed due to a compromised Amazon Web Service (AWS) key used by the company. He says that the same AWS key vulnerability was exploited in the MobiKwik data breach as well. Rajaharia shared a data sample with us – the sample revealed user details as reported in the breach. However, we could not verify the authenticity of the sample. The hacking group, ShinyHunter, has taken down the data for now. Upstox is the latest in Indian companies being targeted by hackers The Upstox data breach is the latest in a string of Indian companies being hacked – the most recent ones were MobiKwik, Juspay, ClickIndia, ChqBook, WedMeGood, among others. However, this time around, the Upstox data breach could be a result of its own folly. SEE ALSO: <a href="https://www.businessinsider.in/tech/news/over-100-million-debit-and-credit-card-users-data-has-been-leaked-online-from-payments-processor-juspay-amazon-and-swiggy/articleshow/80096472.cms">The company that processes payments for Amazon and Swiggy has reported a data leak of over 100 million debit and credit cardholders</a> <a href="https://www.businessinsider.in/tech/news/these-were-the-biggest-cyber-attacks-of-2020/slidelist/79941232.cms">From FireEye to Twitter to Covid-19 vaccine research ⁠— these were the biggest cyber attacks of 2020</a>

Discount broker Upstox suffers data breach – Aadhaar, PAN and bank account numbers leaked

You Searched For "Clickindia" and got 3 results

After Juspay, ClickIndia, ChqBook and WedMeGood have been reportedly hacked — data of over 10 million users up for sale on the dark web

IANS

Dating site MeetMindful hacked — data of over 2 million users leaked including Facebook details and geo-location

IANS

Discount broker Upstox suffers data breach – Aadhaar, PAN and bank account numbers leaked

Rounak Jain

Popular Keywords

Buying Guides