Best printers for Home

Best Mixer Grinder

Best wired Earphones

Best 43 Inch TV in India

Best Wi Fi Routers

Best Home Theatre in India

Smart Watch under 5000

Best Laptops for Education

Best Laptop for Students

New Delhi, After hacking masked credit and debit card data of crores of Juspay users, the same hacker possibly known as '<keyword id="9206309" type="COMPANY" weightage="20" keywordseo="shinyhunters">ShinyHunters</keyword>' is now selling databases belonging to three more Indian companies on <keyword id="1929208" type="COMPANY" weightage="20" keywordseo="dark-web">Dark Web</keyword>, independent cyber security researcher Rajshekhar Rajaharia claimed on Wednesday. According to Rajaharia who first broke the JusPay hacking, the three Indian companies are e-marketplace <keyword id="2901238" type="COMPANY" weightage="20" keywordseo="Clickindia">ClickIndia</keyword>, <keyword id="2461546" type="DOMAIN" weightage="20" keywordseo="FinTech">fintech</keyword> startup for small business owners ChqBook and wedding planning website WedMeGood. "Nearly 80 lakh users of ClickIndia (name, email, mobile and other personal details), 10 lakh users of ChqBook (name, email, mobile, full address and other personal details) and 13 lakh users of WedMeGood (name, email, hashed password, other sensitive personal information)," Rajaharia told. Like JusPay, these three companies have also not allegedly told the users about the data breach, claimed the security researcher. The names of the three Indian companies were first reported by BleepingComputer website, saying that a "data breach broker is selling the allegedly stolen user records for 26 companies on a hacker forum". ChqBook denied the attack while the other two companies were yet to react to the report. According to <keyword id="10553252" type="UNKNOWN" weightage="20" keywordseo="sonit-jain">Sonit Jain</keyword>, CEO of <keyword id="9727813" type="COMPANY" weightage="20" keywordseo="gajshield-infotech">GajShield Infotech</keyword>, such incidents, once confirmed irrespective of data sensitivity, leaves a negative impression over the digital payment platforms. "Simple data like email ID and phone number which may not look sensitive can turn out to be lethal means of financial fraud at personal level, if fallen in wrong hands," Jain told. Bengaluru-based digital payments gateway JusPay said in an earlier statement that the company verified that their Secure Data Store, which hosts the confidential card numbers, was not accessed or compromised. "Thus, all our customers were secure from any kind of risk. Our priority was to inform the merchants and as a measure of abundant precaution, they were issued fresh API keys though it was later verified that even the API keys in use were safe," the company said. According to Rajaharia, the hacker is the same who leaked <keyword id="964794" type="COMPANY" weightage="20" keywordseo="BigBasket">BigBasket</keyword> data, previously reported by the cybersecurity firm Cyble. In November last year, one of India's popular online grocery stores BigBasket, found that its data of over 20 million users had been hacked and were on sale on the dark web for over $40,000. "Now, the same hacker group is asking about $10,000 in Bitcoin for the BigBasket database and is also selling the three companies' databases," Rajaharia said. "There is a strong connection between all these recent data leaks, including BigBasket," he added. US-based third-party cyber intelligence firm Cyble claimed in its official blog that though the alleged breach occurred on October 14, it detected it on October 30, validated it on October 31 and informed BigBasket on November 1. The user database was estimated to be about 20 million, with names, email ids, password hashes, pin, contact numbers, addresses, date of birth, location and IP addresses of login. JusPay on Tuesday said that about 3.5 crore records with masked card data and card fingerprint were compromised by the hacker and the claim of 10 crore cardholders' data being affected is "incorrect". SEE ALSO: <a href="https://www.businessinsider.in/business/startups/news/boat-raises-over-100-million-from-warburg-pincus-analysts-expect-the-headphone-brand-to-double-its-revenue-to-10-billion-this-financial-year/articleshow/80126200.cms">boAt raises over $100 million from Warburg Pincus — analysts expect the headphone brand to double its revenue to ₹10 billion this financial year</a> <a href="https://www.businessinsider.in/tech/news/oneplus-fitness-band-india-launch-date-price-and-everything-you-need-to-know/articleshow/80129498.cms">OnePlus Band India launch date, price and everything you need to know</a> <a href="https://www.businessinsider.in/tech/apps/news/whatsapp-will-stop-working-if-you-do-not-agree-to-its-new-terms-and-privacy-policies/articleshow/80127866.cms">WhatsApp will stop working if you do not agree to its new terms and privacy policies</a> <a href="https://www.businessinsider.in/business/auto/news/toyota-fortuner-suv-2021-launched-in-india-with-new-price-design-and-features-check-details-here/articleshow/80129932.cms">Toyota Fortuner 2021 launched at a starting price of ₹29.98 lakh — here’s all you need to know from looks to specification and features</a>

After Juspay, ClickIndia, ChqBook and WedMeGood have been reportedly hacked — data of over 10 million users up for sale on the dark web

<ul><li><keyword id="140601" type="PERSON" weightage="20" keywordseo="database">Database</keyword> of around 20 million <keyword id="2057213" type="COMPANY" weightage="20" keywordseo="Big-Basket">Big Basket</keyword> users is allegedly out on the internet. </li><li>It is the same data that was reported to be breached in November 2020. </li><li>You can check if your data has been compromised.</li></ul>Another massive database has allegedly been leaked on a popular cybercrime forum. The database is said to be of 20 million Big Basket users, which was first <a href="https://www.businessinsider.in/business/startups/news/bigbasket-the-e-grocery-startup-which-tata-group-is-eyeing-admits-a-data-breach-of-over-20-million-users/articleshow/79122791.cms">confirmed</a> by the Indian grocery delivery startup on November 7, 2020. The database includes email IDs, home addresses, phone numbers, password hashes (potentially hashed OTPs), IP addresses, date of birth and also the user-aggregator interactions done on the <keyword id="235499" type="COMPANY" weightage="20" keywordseo="APP">app</keyword>. The hacker who is said to have published the alleged Big Basket database goes by the name ShinyHunters. The database was made available for anyone to download over the weekend on a well-known cybercrime forum. ShinyHunters is the same hacking group that has started to flood a dark web hacking marketplace with databases containing a combined total of 73.2 million user records over 11 different companies, according to threat intelligence SaaS provider Cyble. The group has been operating since 2015, some of their aliases are Shiny Hunters, #TheDarkOverlord, Gnostic Players. <div type="twitter" handle="UnderTheBreach" handlename="Alon Gal (Under the Breach)" image="http://pbs.twimg.com/profile_images/1364107350748053512/VFKQXcPJ_normal.jpg" favoritecount="234" retweetcount="127" status="Infamous threat actor &quot;ShinyHunters&quot; just leaked the database of &quot;BigBasket, a famous Indian 🇮🇳 online grocery deli… https://t.co/nS3RNKU7Gm" createdat="1619350289000" id="1386281705477189633"></div> Unfortunately, Big Basket was not the only Indian startup that reported data <a href="https://www.businessinsider.in/business/startups/news/from-whitehat-jr-big-basket-and-unacademy-to-dunzo-these-are-the-indian-startups-that-reported-data-leaks-over-the-past-few-months/slidelist/79467618.cms">breaches or bugs in their security system, last year</a>. WhiteHat Jr and Dunzo were also among the startups that saw their data getting compromised over the same period. The news comes weeks after Tata Group shared its plan to acquire <keyword id="964794" type="COMPANY" weightage="20" keywordseo="BigBasket">BigBasket</keyword>, valuing the Indian startup at over $1.8 billion. Big Basket has not released any official statement on the leak. We'll be updating the story if and when we hear from the management. When did the Big Basket breach happen? According to <a href="https://cybleinc.com/2020/11/07/bigbasket-indias-leading-online-supermarket-shopping-allegedly-breached-personal-details-of-over-20-million-people-sold-in-darkweb/">Cyble</a>, which was the first to make the details of the potential breach public, the first breach occurred on October 14 and it found out about it on October 30, later disclosing it to Big Basket on November 1. Cyble also claimed that the data was put up for sale on the dark web for $40,000. <h2 style="line-height:1.38;margin-top:0pt;margin-bottom:0pt;"> </h2>How to check if your data is compromised? <div type="image" title="Pawned ." msid="82256000" hostid="261" caption="&amp;lt;p&amp;gt;My data has been compromised.&amp;lt;/p&amp;gt;"></div> There are some portals like '<a href="https://haveibeenpwned.com/">have I been pwned</a>' and '<a href="https://www.amibreached.com/">am I breached</a>', where you can check your data has been compromised in one of the breaches in the past. You simply need to go to these sites, enter your email used to register the account and hit enter. In the former’s case, you will be informed about the number of breaches. Scrolling down, you will be able to see the platforms that were hit by a breach, compromising your data. I checked mine, and unfortunately, my data has been compromised in 11 breaches (image above) including Big Basket, Zomato, Dunzo, Zoomcar and more.

Big Basket data breach: email IDs, phone numbers, home addresses of two crore Indians allegedly leaked on the web

<ul><li>The <keyword id="608402" type="PERSON" weightage="20" keywordseo="data-breach">data breach</keyword> of 50 million <keyword id="6354576" type="COMPANY" weightage="20" keywordseo="facebook">Facebook</keyword> accounts can potentially have a huge impact on <keyword id="3658" type="LOCATION" weightage="20" keywordseo="India">India</keyword>, where it has its largest user base.</li><li>Aside from just Facebook accounts, there’s a risk that third-party apps that use <keyword id="1553161" type="PERSON" weightage="20" keywordseo="Facebook-Connect">Facebook Connect</keyword> to login may have been breached as well. </li><li>Some of India’s most popular apps like <keyword id="830092" type="COMPANY" weightage="20" keywordseo="Zomato">Zomato</keyword>, <keyword id="964794" type="COMPANY" weightage="20" keywordseo="BigBasket">BigBasket</keyword>, Quora, Dominos and <keyword id="2739840" type="PERSON" weightage="20" keywordseo="Hotstar">Hotstar</keyword> use Facebook Connect as their user authorisation method.</li></ul>It’s concerning that while Facebook made a <a href="https://newsroom.fb.com/news/2018/09/security-update/">statement</a> about 50 million Facebook accounts being hacked and that another 40 million were at risk, they haven’t shared any information about the kind of data that has been stolen. With Facebook’s largest user base in India, with 270 million <a href="https://www.statista.com/statistics/268136/top-15-countries-based-on-number-of-facebook-users/">accounts</a>, Indian users have a lot to be worried about. Not just in terms of their account on the social networking platform but all the apps on their phone that use Facebook to log in. The country’s IT ministry has already asked the US-firm to share details on the country-specific impact of the breach. According to sources at PTI, Facebook has stated that they’re currently in the process of sharing ‘preliminary information’ with the government. Risk to other sites Facebook Connect, when it was launched back in 2008, it was intending to be a to a convenient tool for both businesses and users, where Facebook would serve as the conduit. In just a few taps, users could now use their Facebook login and passwords to access any app. Some of the most popular apps in India like the food delivery app Zomato, Hostar and SonyLIV for video streaming and Quora use Facebook to enable login. This especially concerning since users have the option of saving their card details on apps like Zomato, Dominos and BigBasket to make frequent payments. Though Facebook hasn’t said anything on the third-party app breaches, the stolen 'access tokens' can potentially be used to gain access to other sites, provided an account has been previously authorised. While it’s uncertain how the Indian government will address the matter, Facebook could potentially face a <a href="https://www.wsj.com/articles/facebook-faces-potential-1-63-billion-fine-in-europe-over-data-breach-1538330906">fine</a> of $1.63 million in the European Union.

50 million Facebook accounts breached, why Indian users should care

<ul><li>The <keyword id="158137" type="COMPANY" weightage="20" keywordseo="Domino">Domino</keyword>’s India data breach allegedly includes data of 1 million credit cards and 180 million orders. </li><li>According to security researchers, the reseller is demanding 10 Bitcoin – approximately $5,70,000 – for the 13TB database. </li><li>The database contains mobile numbers, name, home address and more. </li></ul>Domino’s India, the popular American multinational pizza restaurant chain, is allegedly the latest victim of a data breach. The Domino’s data breach has exposed 1 million credit card details along with 180 million order details. According to <a href="https://twitter.com/UnderTheBreach/status/1383673094963822597">Alon Gal</a>, security researcher and Chief Technology Officer of cybersecurity firm Hudson Rock, the reseller is demanding 10 Bitcoin, which is approximately $570,000 for the complete database, which is 13TB in size. <div type="twitter" handle="UnderTheBreach" handlename="Alon Gal (Under the Breach)" image="http://pbs.twimg.com/profile_images/1364107350748053512/VFKQXcPJ_normal.jpg" favoritecount="271" retweetcount="154" status="Threat actor claiming to have hacked Domino's India (@dominos) and stealing 13TB worth of data.Information includ… https://t.co/ayn9de8hgf" createdat="1618728347000" id="1383673094963822597"></div> Additionally, Gal also says that the hacker has plans to build a search portal similar to the MobiKwik one, allowing anyone to enter a search string to confirm the existence of those details. The database includes details like mobile numbers, names, home addresses, payment type and social login tokens. Rajashekhar Rajaharia, another security researcher, also <a href="https://twitter.com/rajaharia/status/1384079086927052801">confirmed</a> the breach, along with a data tree that reveals all the details that have been accessed by the hackers. Apart from the data of Domino’s India’s users and orders, the hacker also got access to data of 250 employees of the company across different departments like IT, Legal, Finance among others. Rajaharia has confirmed to Business Insider that this is the same hacker who breached MobiKwik earlier last month. He says that the hacker sold the database to a reseller who has now posted the details on the dark web. Domino’s India data breach exacerbates security concerns plaguing Indian companies Domino’s India won’t be the last Indian company to be hacked, but it highlights the endless stream of Indian companies facing security concerns. Earlier last month, MobiKwik was reportedly hacked, exposing data of 3.5 million users. While the company <a href="https://www.businessinsider.in/business/startups/news/mobikwik-ceo-orders-a-forensic-audit-after-denying-any-data-leak-from-its-digital-wallet/articleshow/81759461.cms">denied it</a>, it ordered a forensic audit post-fact. Prior to it, Juspay, BigBasket, Unacademy and others were also breached. India’s unicorn startups, <a href="https://www.businessinsider.in/defense/news/the-chinese-cyber-threat-is-real-and-indias-best-defence-right-now-is-to-keep-its-outage-time-limited/articleshow/81981886.cms">power sector</a> and others like Jio are amongst the prime targets for Chinese hackers. SEE ALSO: <a href="https://www.businessinsider.in/tech/news/over-100-million-debit-and-credit-card-users-data-has-been-leaked-online-from-payments-processor-juspay-amazon-and-swiggy/articleshow/80096472.cms">The company that processes payments for Amazon and Swiggy has reported a data leak of over 100 million debit and credit cardholders</a> <a href="https://www.businessinsider.in/defense/news/the-chinese-cyber-threat-is-real-and-indias-best-defence-right-now-is-to-keep-its-outage-time-limited/articleshow/81981886.cms">The Chinese cyber threat is real — and India’s best defence right now is to keep its outage time limited</a> <a href="https://www.businessinsider.in/tech/news/after-jio-swiggy-paytm-ola-and-byjus-and-other-startups-on-target-of-chinese-hackers/articleshow/77497819.cms">After Jio, India's unicorn startups are the top target for Chinese hackers trying to get their hands on Indian users' data</a>

Domino’s India data breach allegedly exposes 1 million credit card details, 180 million order details

New Delhi, A hacker that goes by the name of <keyword id="9206309" type="UNKNOWN" weightage="20" keywordseo="shinyhunters">ShinyHunters</keyword> has now leaked data of 2.28 million users of a dating <keyword id="10649183" type="UNKNOWN" weightage="20" keywordseo="website-meetmindful">website MeetMindful</keyword> that includes real names, Facebook account tokens, email addresses and geo-location information. According to a report in ZDNet, the leaked <keyword id="14345" type="PERSON" weightage="20" keywordseo="Date">date</keyword> in a 1.2GB file has been shared as a free download on a publicly accessible hacking forum. "The content of this file includes a wealth of information that users provided when they set up profiles on the MeetMindful site and mobile apps," said the report citing a cyber security research on Sunday. The leaked data also includes body details, dating preferences, marital status, birth dates, IP addresses and Bcrypt-hashed account passwords. The message on the website reads: "This website is using a security service to protect itself from online attacks". MeetMindful was founded in 2014. For several MeetMindful users, the leaked data can be used to trace their dating profiles back to their real-world identities. The data is still available for download on the public file-hosting site where it was initially uploaded. Several hackers have been engaged in sextortion where they contact dating site users, threatening to expose their profiles to family unless they pay a ransom. ShinyHunters has been involved in several data breaches recently, including allegedly leaking sensitive data of nearly 3.25 lakh users of Delhi-NCR based global cryptocurrency exchange and wallet, BuyUcoin, on the Dark Web. ShinyHunters has also leaked 1.9 million (19 lakh) user records stolen from free online photo editing application Pixlr. According to cyber security experts, the hacker is the same who earlier leaked BigBasket and JusPay data in <keyword id="3658" type="LOCATION" weightage="20" keywordseo="India">India</keyword>. Three other Indian companies -- e-marketplace ClickIndia, <keyword id="2461546" type="DOMAIN" weightage="20" keywordseo="FinTech">fintech</keyword> startup for small business owners ChqBook and wedding planning website WedMeGood -- were also breached possibly by the same hacker. SEE ALSO: <a href="https://www.businessinsider.in/business/auto/news/an-american-electric-car-maker-explains-why-it-took-a-different-route-than-elon-musks-tesla-tata-motors-or-mahindra/articleshow/80442243.cms?upcache=2">An American electric car maker explains why it took a different route than Elon Musk’s Tesla, Tata Motors or Mahindra</a> <a href="https://www.businessinsider.in/tech/mobile/news/new-realme-stores-in-india-and-ceo-says-there-is-plan-for-new-devices/articleshow/80443801.cms">EXCLUSIVE: Realme plans to open 500 new stores in 2021⁠— the CEO reveals the company will go beyond smartphones in the 5G era</a> <a href="https://www.businessinsider.in/budget/news/indias-co-working-sector-wants-recognition-under-real-estate-tax-benefits-as-flexible-workspaces-aim-for-a-significant-revival-in-the-post-covid-era/articleshow/80431768.cms">India’s co-working sector wants recognition under real estate, tax benefits as flexible workspaces aim for a significant revival in the post-COVID era</a>

You Searched For "bigbasket hacked" and got 5 results

After Juspay, ClickIndia, ChqBook and WedMeGood have been reportedly hacked — data of over 10 million users up for sale on the dark web

IANS

Big Basket data breach: email IDs, phone numbers, home addresses of two crore Indians allegedly leaked on the web

Sudhanshu Singh

50 million Facebook accounts breached, why Indian users should care

Prabhjote Gill

Domino’s India data breach allegedly exposes 1 million credit card details, 180 million order details

Rounak Jain

Dating site MeetMindful hacked — data of over 2 million users leaked including Facebook details and geo-location

IANS

Popular Keywords

Buying Guides