Best printers for Home

Best Mixer Grinder

Best wired Earphones

Best 43 Inch TV in India

Best Wi Fi Routers

Best Home Theatre in India

Smart Watch under 5000

Best Laptops for Education

Best Laptop for Students

<ul><li>Information of over 100 million debit and credit card users has been leaked online from payments processor <keyword id="3259695" type="PERSON" weightage="20" keywordseo="Juspay">Juspay</keyword>.</li><li>The leak includes the user’s names, contact information and information related to their debit and credit cards.</li><li>Juspay processes payments for companies like Amazon, Swiggy, MakeMyTrip and several other companies.</li><li>Cybersecurity researcher Rajshekhar Rajaharia who first spotted the breach has said that it could become a lot more serious if hackers figure out the encryption algorithm.</li></ul>In what could be a major data breach, information of over 100 million debit and credit card users from payments processor Juspay has leaked on the dark web. Juspay processes payments for companies like Amazon, Swiggy, MakeMyTrip among others. The leaked data is in the form of a data dump and has been leaked through a compromised server of Juspay. Juspay has <a href="https://juspayproducts.medium.com/your-security-is-our-first-concern-8d98c96e5f17">confirmed</a> the data leak in its official blog post, outlining the details of the breach. “It pains us to inform you that a data breach did happen on 18th August 2020. Non-sensitive masked card information, mobile numbers and email ids of a subset of our users were compromised,” the company said. Cybersecurity researcher Rajshekhar Rajaharia discovered the data breach. He found that the data dump was available for sale on the dark web. Speaking to Business Insider, Rajaharia noted that this data breach could be a lot more serious if the hackers figure out the encryption algorithm used to hash card numbers. Here’s what was leaked in the <keyword id="10538684" type="UNKNOWN" weightage="20" keywordseo="Juspay-Data-Breach">Juspay data breach</keyword> As per Juspay, the leaked information includes non-sensitive masked card information, mobile numbers and email IDs of a subset of users. The company has said that the leaked information does not include full card numbers, order information, card PIN or password. The data on the dark web includes information such as the bank that has issued the card, card expiry date, the last four digits of the card, masked card number, card type and the user’s name, among other details. Should you be worried? Rajaharia pointed out that there could be a major risk to users if the algorithm used to hash card numbers is leaked or if the hackers figure it out on their own. A hash is a unique and fixed-length string that is mapped to a set of data. In this case, Juspay has hashed the 16-digit debit and credit card numbers in order to process transactions. If hackers can figure out the algorithm used to generate these hashes, they could use brute force and find out what the original card numbers are. Juspay has masked only six digits out of sixteen-digit card numbers. Rajaharia says that while this is good, the safety of users rests primarily on the hashing algorithm. Scammers could also exploit this data leak In addition to the risks mentioned above, Rajaharia also pointed out that scammers could exploit this data leak to dupe cardholders. Since the leak includes mobile numbers, they could call unsuspecting cardholders and trick them into revealing the full card numbers, PIN, CVV as well as one-time passwords. Rajaharia also pointed out that since these users are paying customers, they are a lot more valuable than non-paying customers. This makes the <keyword id="10540589" type="UNKNOWN" weightage="20" keywordseo="juspay-data-leak">Juspay data leak</keyword> a lot more lucrative for hackers and scammers. According to him, the seller he is in touch with has demanded $8,000 in Bitcoin to purchase the data. SEE ALSO: <a href="https://www.businessinsider.in/tech/news/these-were-the-biggest-cyber-attacks-of-2020/slidelist/79941232.cms">From FireEye to Twitter to Covid-19 vaccine research ⁠— these were the biggest cyber attacks of 2020</a> <a href="https://www.businessinsider.in/retail/news/hackers-are-sending-customers-fake-shipping-messages-appearing-to-come-from-amazon-and-ups-as-a-shipageddon-is-expected-during-a-hectic-shopping-season/articleshow/79816866.cms">Hackers are sending customers fake shipping messages appearing to come from Amazon and UPS as a 'shipageddon' is expected during a hectic shopping season</a>

The company that processes payments for Amazon and Swiggy has reported a data leak of over 100 million debit and credit cardholders

New Delhi, After hacking masked credit and debit card data of crores of Juspay users, the same hacker possibly known as '<keyword id="9206309" type="COMPANY" weightage="20" keywordseo="shinyhunters">ShinyHunters</keyword>' is now selling databases belonging to three more Indian companies on <keyword id="1929208" type="COMPANY" weightage="20" keywordseo="dark-web">Dark Web</keyword>, independent cyber security researcher Rajshekhar Rajaharia claimed on Wednesday. According to Rajaharia who first broke the JusPay hacking, the three Indian companies are e-marketplace <keyword id="2901238" type="COMPANY" weightage="20" keywordseo="Clickindia">ClickIndia</keyword>, <keyword id="2461546" type="DOMAIN" weightage="20" keywordseo="FinTech">fintech</keyword> startup for small business owners ChqBook and wedding planning website WedMeGood. "Nearly 80 lakh users of ClickIndia (name, email, mobile and other personal details), 10 lakh users of ChqBook (name, email, mobile, full address and other personal details) and 13 lakh users of WedMeGood (name, email, hashed password, other sensitive personal information)," Rajaharia told. Like JusPay, these three companies have also not allegedly told the users about the data breach, claimed the security researcher. The names of the three Indian companies were first reported by BleepingComputer website, saying that a "data breach broker is selling the allegedly stolen user records for 26 companies on a hacker forum". ChqBook denied the attack while the other two companies were yet to react to the report. According to <keyword id="10553252" type="UNKNOWN" weightage="20" keywordseo="sonit-jain">Sonit Jain</keyword>, CEO of <keyword id="9727813" type="COMPANY" weightage="20" keywordseo="gajshield-infotech">GajShield Infotech</keyword>, such incidents, once confirmed irrespective of data sensitivity, leaves a negative impression over the digital payment platforms. "Simple data like email ID and phone number which may not look sensitive can turn out to be lethal means of financial fraud at personal level, if fallen in wrong hands," Jain told. Bengaluru-based digital payments gateway JusPay said in an earlier statement that the company verified that their Secure Data Store, which hosts the confidential card numbers, was not accessed or compromised. "Thus, all our customers were secure from any kind of risk. Our priority was to inform the merchants and as a measure of abundant precaution, they were issued fresh API keys though it was later verified that even the API keys in use were safe," the company said. According to Rajaharia, the hacker is the same who leaked <keyword id="964794" type="COMPANY" weightage="20" keywordseo="BigBasket">BigBasket</keyword> data, previously reported by the cybersecurity firm Cyble. In November last year, one of India's popular online grocery stores BigBasket, found that its data of over 20 million users had been hacked and were on sale on the dark web for over $40,000. "Now, the same hacker group is asking about $10,000 in Bitcoin for the BigBasket database and is also selling the three companies' databases," Rajaharia said. "There is a strong connection between all these recent data leaks, including BigBasket," he added. US-based third-party cyber intelligence firm Cyble claimed in its official blog that though the alleged breach occurred on October 14, it detected it on October 30, validated it on October 31 and informed BigBasket on November 1. The user database was estimated to be about 20 million, with names, email ids, password hashes, pin, contact numbers, addresses, date of birth, location and IP addresses of login. JusPay on Tuesday said that about 3.5 crore records with masked card data and card fingerprint were compromised by the hacker and the claim of 10 crore cardholders' data being affected is "incorrect". SEE ALSO: <a href="https://www.businessinsider.in/business/startups/news/boat-raises-over-100-million-from-warburg-pincus-analysts-expect-the-headphone-brand-to-double-its-revenue-to-10-billion-this-financial-year/articleshow/80126200.cms">boAt raises over $100 million from Warburg Pincus — analysts expect the headphone brand to double its revenue to ₹10 billion this financial year</a> <a href="https://www.businessinsider.in/tech/news/oneplus-fitness-band-india-launch-date-price-and-everything-you-need-to-know/articleshow/80129498.cms">OnePlus Band India launch date, price and everything you need to know</a> <a href="https://www.businessinsider.in/tech/apps/news/whatsapp-will-stop-working-if-you-do-not-agree-to-its-new-terms-and-privacy-policies/articleshow/80127866.cms">WhatsApp will stop working if you do not agree to its new terms and privacy policies</a> <a href="https://www.businessinsider.in/business/auto/news/toyota-fortuner-suv-2021-launched-in-india-with-new-price-design-and-features-check-details-here/articleshow/80129932.cms">Toyota Fortuner 2021 launched at a starting price of ₹29.98 lakh — here’s all you need to know from looks to specification and features</a>

After Juspay, ClickIndia, ChqBook and WedMeGood have been reportedly hacked — data of over 10 million users up for sale on the dark web

Bengaluru-based mobile payments startup <keyword id="3259695" type="UNKNOWN" weightage="100" keywordseo="Juspay">Juspay</keyword> has raised Rs 40 crore in series-A round of funding from <keyword id="144381" type="COMPANY" weightage="100" keywordseo="Accel-Partners">Accel Partners</keyword>, the venture capital firm. Not only this, it has also raised capital from Ashish Hemrajani, Parikshit Dar and Rajesh Balpande, the founders of online ticket booking app <keyword id="600792" type="UNKNOWN" weightage="100" keywordseo="BookMyShow">Bookmyshow</keyword> founders. 
 
The company representatives said that the funds will be used to build its product. 
 
In the funding, Juspay, which was founded three years back, was valued at over Rs 200 crore. The company also has India Value Fund partner and former Network18 CEO Haresh Chawla as an angel investor. 
 
The deal has given Accel about 20% stake in the company, one of the persons aware of the matter told ET. 
 
Accel, which typically invests less than Rs 6 crore in very early stage companies, cited the attractiveness of the startup and broader payments space for this huge investment. 
 
Juspay was founded by former Amazon engineer Vimal Kumar and Ramanathan RV in 2012, while Bloomberg executive Sheetal Lalwani joined them in 2014. 
 
Their technology helps companies simplify payments by aggregating different services across net banking, wallets and cards. It also helps merchants in improving success rate of payments on the platforms. 
 
It can boast of India's top ecommerce platforms like Amazon India, Snapdeal, Bookmyshow, Makemytrip, Yatra, Swiggy, Freecharge, Foodpanda and Jabong as its clients. 
 
<a href="http://d152j5tfobgaot.cloudfront.net/wp-content/uploads/2014/11/Vimal-Ram-Juspay-Safe.jpg">Image source</a>

JusPay raises Rs 40cr from founders of Accel and Bookmyshow

<ul><li><keyword id="3489555" type="PERSON" weightage="20" keywordseo="upstox">Upstox</keyword>, the second largest stock broker in India, has suffered a massive data breach.</li><li>This breach has exposed user data like Aadhaar, PAN, bank account numbers and more.</li><li>While Upstox did not comment on the data leak, it said it has upgraded its security systems ‘manifold’ on the recommendations of a global cyber-security firm.</li></ul> Popular discount broker Upstox has suffered a massive data breach that has exposed some important data like Aadhaar, PAN and bank account numbers, apart from other personally identifiable information like mobile numbers and email addresses. Upstox is a Delhi-based discount stock broker that allows its customers to buy and sell shares. It is backed by Tiger Global and has over <a href="https://economictimes.indiatimes.com/markets/stocks/news/what-made-upstox-indias-second-largest-stockbroker-after-zerodha/articleshow/78745921.cms">1 million customers</a>. “We have upgraded our security systems manifold recently, on the recommendations of a global cyber-security firm. We brought in the expertise of this globally renowned firm after we received emails claiming unauthorised access into our database,” Upstox <a href="https://upstox.com/announcements/customer-support/security-measures/">said</a> on its website, reacting to reports of the data breach. The company said that despite the data breach, the funds and shares of its customers are safe. This is for two reasons – funds in your Upstox account can only be withdrawn to the linked bank account, and the shares are held with the depositories – either Central Depositories Services India Ltd (CDSL) or National Securities Depository Ltd (NSDL) – and not with Upstox. With that being said, Upstox users have other things to be worried about. Security researcher Rajshekhar Rajaharia, who <a href="https://www.businessinsider.in/tech/news/over-100-million-debit-and-credit-card-users-data-has-been-leaked-online-from-payments-processor-juspay-amazon-and-swiggy/articleshow/80096472.cms">had earlier tipped Business Insider about Juspay</a> and MobiKwik data breaches, told us that the <keyword id="11082460" type="UNKNOWN" weightage="20" keywordseo="Upstox-data-breach">Upstox data breach</keyword> includes Aadhaar, PAN, passport, bank account numbers, mobile numbers and even the photos of signatures. This data could be used by hackers or malicious parties to impersonate users and transact on their behalf without the users’ knowledge. According to Rajaharia, the Upstox data breach was executed due to a compromised Amazon Web Service (AWS) key used by the company. He says that the same AWS key vulnerability was exploited in the MobiKwik data breach as well. Rajaharia shared a data sample with us – the sample revealed user details as reported in the breach. However, we could not verify the authenticity of the sample. The hacking group, ShinyHunter, has taken down the data for now. Upstox is the latest in Indian companies being targeted by hackers The Upstox data breach is the latest in a string of Indian companies being hacked – the most recent ones were MobiKwik, Juspay, ClickIndia, ChqBook, WedMeGood, among others. However, this time around, the Upstox data breach could be a result of its own folly. SEE ALSO: <a href="https://www.businessinsider.in/tech/news/over-100-million-debit-and-credit-card-users-data-has-been-leaked-online-from-payments-processor-juspay-amazon-and-swiggy/articleshow/80096472.cms">The company that processes payments for Amazon and Swiggy has reported a data leak of over 100 million debit and credit cardholders</a> <a href="https://www.businessinsider.in/tech/news/these-were-the-biggest-cyber-attacks-of-2020/slidelist/79941232.cms">From FireEye to Twitter to Covid-19 vaccine research ⁠— these were the biggest cyber attacks of 2020</a>

Discount broker Upstox suffers data breach – Aadhaar, PAN and bank account numbers leaked

<ul><li>The <keyword id="158137" type="COMPANY" weightage="20" keywordseo="Domino">Domino</keyword>’s India data breach allegedly includes data of 1 million credit cards and 180 million orders. </li><li>According to security researchers, the reseller is demanding 10 Bitcoin – approximately $5,70,000 – for the 13TB database. </li><li>The database contains mobile numbers, name, home address and more. </li></ul>Domino’s India, the popular American multinational pizza restaurant chain, is allegedly the latest victim of a data breach. The Domino’s data breach has exposed 1 million credit card details along with 180 million order details. According to <a href="https://twitter.com/UnderTheBreach/status/1383673094963822597">Alon Gal</a>, security researcher and Chief Technology Officer of cybersecurity firm Hudson Rock, the reseller is demanding 10 Bitcoin, which is approximately $570,000 for the complete database, which is 13TB in size. <div type="twitter" handle="UnderTheBreach" handlename="Alon Gal (Under the Breach)" image="http://pbs.twimg.com/profile_images/1364107350748053512/VFKQXcPJ_normal.jpg" favoritecount="271" retweetcount="154" status="Threat actor claiming to have hacked Domino's India (@dominos) and stealing 13TB worth of data.Information includ… https://t.co/ayn9de8hgf" createdat="1618728347000" id="1383673094963822597"></div> Additionally, Gal also says that the hacker has plans to build a search portal similar to the MobiKwik one, allowing anyone to enter a search string to confirm the existence of those details. The database includes details like mobile numbers, names, home addresses, payment type and social login tokens. Rajashekhar Rajaharia, another security researcher, also <a href="https://twitter.com/rajaharia/status/1384079086927052801">confirmed</a> the breach, along with a data tree that reveals all the details that have been accessed by the hackers. Apart from the data of Domino’s India’s users and orders, the hacker also got access to data of 250 employees of the company across different departments like IT, Legal, Finance among others. Rajaharia has confirmed to Business Insider that this is the same hacker who breached MobiKwik earlier last month. He says that the hacker sold the database to a reseller who has now posted the details on the dark web. Domino’s India data breach exacerbates security concerns plaguing Indian companies Domino’s India won’t be the last Indian company to be hacked, but it highlights the endless stream of Indian companies facing security concerns. Earlier last month, MobiKwik was reportedly hacked, exposing data of 3.5 million users. While the company <a href="https://www.businessinsider.in/business/startups/news/mobikwik-ceo-orders-a-forensic-audit-after-denying-any-data-leak-from-its-digital-wallet/articleshow/81759461.cms">denied it</a>, it ordered a forensic audit post-fact. Prior to it, Juspay, BigBasket, Unacademy and others were also breached. India’s unicorn startups, <a href="https://www.businessinsider.in/defense/news/the-chinese-cyber-threat-is-real-and-indias-best-defence-right-now-is-to-keep-its-outage-time-limited/articleshow/81981886.cms">power sector</a> and others like Jio are amongst the prime targets for Chinese hackers. SEE ALSO: <a href="https://www.businessinsider.in/tech/news/over-100-million-debit-and-credit-card-users-data-has-been-leaked-online-from-payments-processor-juspay-amazon-and-swiggy/articleshow/80096472.cms">The company that processes payments for Amazon and Swiggy has reported a data leak of over 100 million debit and credit cardholders</a> <a href="https://www.businessinsider.in/defense/news/the-chinese-cyber-threat-is-real-and-indias-best-defence-right-now-is-to-keep-its-outage-time-limited/articleshow/81981886.cms">The Chinese cyber threat is real — and India’s best defence right now is to keep its outage time limited</a> <a href="https://www.businessinsider.in/tech/news/after-jio-swiggy-paytm-ola-and-byjus-and-other-startups-on-target-of-chinese-hackers/articleshow/77497819.cms">After Jio, India's unicorn startups are the top target for Chinese hackers trying to get their hands on Indian users' data</a>

Domino’s India data breach allegedly exposes 1 million credit card details, 180 million order details

New Delhi, A hacker that goes by the name of <keyword id="9206309" type="UNKNOWN" weightage="20" keywordseo="shinyhunters">ShinyHunters</keyword> has now leaked data of 2.28 million users of a dating <keyword id="10649183" type="UNKNOWN" weightage="20" keywordseo="website-meetmindful">website MeetMindful</keyword> that includes real names, Facebook account tokens, email addresses and geo-location information. According to a report in ZDNet, the leaked <keyword id="14345" type="PERSON" weightage="20" keywordseo="Date">date</keyword> in a 1.2GB file has been shared as a free download on a publicly accessible hacking forum. "The content of this file includes a wealth of information that users provided when they set up profiles on the MeetMindful site and mobile apps," said the report citing a cyber security research on Sunday. The leaked data also includes body details, dating preferences, marital status, birth dates, IP addresses and Bcrypt-hashed account passwords. The message on the website reads: "This website is using a security service to protect itself from online attacks". MeetMindful was founded in 2014. For several MeetMindful users, the leaked data can be used to trace their dating profiles back to their real-world identities. The data is still available for download on the public file-hosting site where it was initially uploaded. Several hackers have been engaged in sextortion where they contact dating site users, threatening to expose their profiles to family unless they pay a ransom. ShinyHunters has been involved in several data breaches recently, including allegedly leaking sensitive data of nearly 3.25 lakh users of Delhi-NCR based global cryptocurrency exchange and wallet, BuyUcoin, on the Dark Web. ShinyHunters has also leaked 1.9 million (19 lakh) user records stolen from free online photo editing application Pixlr. According to cyber security experts, the hacker is the same who earlier leaked BigBasket and JusPay data in <keyword id="3658" type="LOCATION" weightage="20" keywordseo="India">India</keyword>. Three other Indian companies -- e-marketplace ClickIndia, <keyword id="2461546" type="DOMAIN" weightage="20" keywordseo="FinTech">fintech</keyword> startup for small business owners ChqBook and wedding planning website WedMeGood -- were also breached possibly by the same hacker. SEE ALSO: <a href="https://www.businessinsider.in/business/auto/news/an-american-electric-car-maker-explains-why-it-took-a-different-route-than-elon-musks-tesla-tata-motors-or-mahindra/articleshow/80442243.cms?upcache=2">An American electric car maker explains why it took a different route than Elon Musk’s Tesla, Tata Motors or Mahindra</a> <a href="https://www.businessinsider.in/tech/mobile/news/new-realme-stores-in-india-and-ceo-says-there-is-plan-for-new-devices/articleshow/80443801.cms">EXCLUSIVE: Realme plans to open 500 new stores in 2021⁠— the CEO reveals the company will go beyond smartphones in the 5G era</a> <a href="https://www.businessinsider.in/budget/news/indias-co-working-sector-wants-recognition-under-real-estate-tax-benefits-as-flexible-workspaces-aim-for-a-significant-revival-in-the-post-covid-era/articleshow/80431768.cms">India’s co-working sector wants recognition under real estate, tax benefits as flexible workspaces aim for a significant revival in the post-COVID era</a>

You Searched For "Juspay" and got 6 results

The company that processes payments for Amazon and Swiggy has reported a data leak of over 100 million debit and credit cardholders

Rounak Jain

After Juspay, ClickIndia, ChqBook and WedMeGood have been reportedly hacked — data of over 10 million users up for sale on the dark web

IANS

JusPay raises Rs 40cr from founders of Accel and Bookmyshow

BI India Bureau

Discount broker Upstox suffers data breach – Aadhaar, PAN and bank account numbers leaked

Rounak Jain

Domino’s India data breach allegedly exposes 1 million credit card details, 180 million order details

Rounak Jain

Dating site MeetMindful hacked — data of over 2 million users leaked including Facebook details and geo-location

IANS

Popular Keywords

Buying Guides