Best printers for Home

Best Mixer Grinder

Best wired Earphones

Best 43 Inch TV in India

Best Wi Fi Routers

Best Home Theatre in India

Smart Watch under 5000

Best Laptops for Education

Best Laptop for Students

<ul><li>The State Bank of India’s (SBI) server was left without any password protection exposing the contact details, balances and partial account number details of its users. </li><li>The server has since been secured, but while left vulnerable, it had archived messages going back to December. </li><li>While no sensitive data was disclosed, the data breach leaves customers susceptible to social engineering hacks and extortion.</li></ul>Hacking is where someone has to bypass security in order to get information, but India’s largest bank, the State Bank of India (SBI), left the data of millions of users exposed all because it <a href="https://techcrunch.com/2019/01/30/state-bank-india-data-leak/">did not set a password</a> on its server. The ‘SBI Quick’ server — a service that allows the bank’s customers to text the bank for information on their accounts — has reportedly been secured since the report. But while it was open, it had archives of messages dating back to December according to TechCrunch’s investigation. That’s millions and millions of messages about balance information, loan inquiries, financial transactions and other data — although there were no passwords disclosed. The data breach was spotted by a security researcher (unnamed) and verified by Karan Saini, the researcher who previously found a leak in India’s Aadhaar database, the largest biometric authentication system in the world. Business Insider has reached out to SBI but they are yet to issue a response on the data breach. . Your data is secure… so far While there was no sensitive data on the server, simple details like partial account numbers and contact information can render the SBI customers vulnerable to ransom demands. Social engineering attacks, one of the most common ways commit financial fraud, could also be a possibility. Drawing a correlation between a phone number and a high account balance, a social engineering attack would involve human interaction and manipulating their targets in to breaking normal security guidelines. 
 
 <div type="ExtQuote" text="“The data available could potentially be used to profile and target individuals that are known to have high account balances.&quot;" auname="Karan Saini, security researcher told TechCrunch"></div>





 The scope of the problem As India’s largest bank, SBI claims to have more than 500 million customers worldwide with 740 million accounts. And since the bank hasn’t issued any response there isn’t any data available to determine exactly which customers’ data was exposed and how many customers are vulnerable overall. But, in a single data, the server shoots out nearly three million messages which doesn’t paint a very encouraging picture. India’s problem with data Protecting data is a much larger program and goes beyond SBI. It’s not companies aren’t spending on security, but it’s getting harder to stay ahead of the challenges. To be fair, in SBI’s case, it was a simple case of negligence. When the Cosmos Bank — a 112 year old bank in India — was <a href="https://economictimes.indiatimes.com/industry/banking/finance/banking/north-korean-connection-to-cosmos-hacking-signs-point-to-bangladesh-heist-masterminds/articleshow/65411640.cms">hacked</a> in August last year, it was the victim of an attack carried out by the Lazarus Group of North Korea. A report by the Boston Consulting Group (BCG) <a href="https://www.bcg.com/en-in/capabilities/technology-digital/mastering-cybersecurity.aspx">found</a> that among 50 of the recent major data breaches, only 28% were caused by inadequate security tech. In all the other cases — that’s 72% or nearly three-quarters — the breaches were caused due to organizational failure, process failure or, simply, employee negligence. While improving the technology behind cybersecurity is important, it’s also key to drive resilience measures in order to improve efficacy. See also: <a href="https://www.businessinsider.in/nearly-773-million-email-accounts-have-been-exposed-in-a-massive-data-breach-heres-how-to-check-if-you-were-affected/articleshow/67576032.cms">Nearly 773 million email accounts have been exposed in a massive data breach. Here's how to check if you were affected</a> <a href="https://www.businessinsider.in/state-bank-of-india-halves-withdrawal-limit-at-atms-to-20000-per-day-to-prevent-fraud/articleshow/66442390.cms">State Bank of India halves withdrawal limit at ATMs to ₹20,000 per day to prevent fraud</a> <a href="https://www.businessinsider.in/the-21-biggest-data-breaches-of-2018/articleshow/67045497.cms">The 21 biggest data breaches of 2018</a>

India’s largest bank leaves the data of millions of users exposed

<ul><li><keyword id="3489555" type="PERSON" weightage="20" keywordseo="upstox">Upstox</keyword>, the second largest stock broker in India, has suffered a massive data breach.</li><li>This breach has exposed user data like Aadhaar, PAN, bank account numbers and more.</li><li>While Upstox did not comment on the data leak, it said it has upgraded its security systems ‘manifold’ on the recommendations of a global cyber-security firm.</li></ul> Popular discount broker Upstox has suffered a massive data breach that has exposed some important data like Aadhaar, PAN and bank account numbers, apart from other personally identifiable information like mobile numbers and email addresses. Upstox is a Delhi-based discount stock broker that allows its customers to buy and sell shares. It is backed by Tiger Global and has over <a href="https://economictimes.indiatimes.com/markets/stocks/news/what-made-upstox-indias-second-largest-stockbroker-after-zerodha/articleshow/78745921.cms">1 million customers</a>. “We have upgraded our security systems manifold recently, on the recommendations of a global cyber-security firm. We brought in the expertise of this globally renowned firm after we received emails claiming unauthorised access into our database,” Upstox <a href="https://upstox.com/announcements/customer-support/security-measures/">said</a> on its website, reacting to reports of the data breach. The company said that despite the data breach, the funds and shares of its customers are safe. This is for two reasons – funds in your Upstox account can only be withdrawn to the linked bank account, and the shares are held with the depositories – either Central Depositories Services India Ltd (CDSL) or National Securities Depository Ltd (NSDL) – and not with Upstox. With that being said, Upstox users have other things to be worried about. Security researcher Rajshekhar Rajaharia, who <a href="https://www.businessinsider.in/tech/news/over-100-million-debit-and-credit-card-users-data-has-been-leaked-online-from-payments-processor-juspay-amazon-and-swiggy/articleshow/80096472.cms">had earlier tipped Business Insider about Juspay</a> and MobiKwik data breaches, told us that the <keyword id="11082460" type="UNKNOWN" weightage="20" keywordseo="Upstox-data-breach">Upstox data breach</keyword> includes Aadhaar, PAN, passport, bank account numbers, mobile numbers and even the photos of signatures. This data could be used by hackers or malicious parties to impersonate users and transact on their behalf without the users’ knowledge. According to Rajaharia, the Upstox data breach was executed due to a compromised Amazon Web Service (AWS) key used by the company. He says that the same AWS key vulnerability was exploited in the MobiKwik data breach as well. Rajaharia shared a data sample with us – the sample revealed user details as reported in the breach. However, we could not verify the authenticity of the sample. The hacking group, ShinyHunter, has taken down the data for now. Upstox is the latest in Indian companies being targeted by hackers The Upstox data breach is the latest in a string of Indian companies being hacked – the most recent ones were MobiKwik, Juspay, ClickIndia, ChqBook, WedMeGood, among others. However, this time around, the Upstox data breach could be a result of its own folly. SEE ALSO: <a href="https://www.businessinsider.in/tech/news/over-100-million-debit-and-credit-card-users-data-has-been-leaked-online-from-payments-processor-juspay-amazon-and-swiggy/articleshow/80096472.cms">The company that processes payments for Amazon and Swiggy has reported a data leak of over 100 million debit and credit cardholders</a> <a href="https://www.businessinsider.in/tech/news/these-were-the-biggest-cyber-attacks-of-2020/slidelist/79941232.cms">From FireEye to Twitter to Covid-19 vaccine research ⁠— these were the biggest cyber attacks of 2020</a>

Discount broker Upstox suffers data breach – Aadhaar, PAN and bank account numbers leaked

<ul><li>Data breaches have become quite common, affecting millions of users.</li><li>Companies like Twitter, LastPass, and Rockstar were affected by data breaches in 2022.</li><li>In this post, we look at the <keyword id="15826003" type="General" weightage="20" keywordseo="top-data-breaches" source="Orion">top data breaches</keyword> of 2022.</li></ul>Data security has improved significantly, but data breaches are still happening. The year 2022 saw several large-scale data breaches affecting millions of users. In addition to affecting user data, a few breaches have impacted sensitive company data. From popular password manager LastPass to microblogging platform Twitter, several companies have been affected by data breaches in 2022. In this post, we look at some of the top data breaches of 2022. <cmsannotation type="cmsannotation" annotationid="Top data breaches of 2022" comment="subhead" text="Top data breaches of 2022">Top data breaches of 2022</cmsannotation> <cmsannotation type="cmsannotation" annotationid="Red Cross" comment="subhead2" text="Red Cross">Red Cross</cmsannotation> In one of the first data breaches of 2022, malicious actors gained access to important files of the International Committee of the Red Cross (ICRC). The attackers reportedly gained access to data related to over 515,000 “highly vulnerable” people. According to <a href="https://techcrunch.com/2022/01/20/red-cross-data-breach/">reports</a>, the database mostly included information on people separated from their families due to conflict, migration, and disaster. The <keyword id="608402" type="General" weightage="100" keywordseo="data-breach" source="Orion">data breach</keyword> reportedly included people’s names, locations, and contact information. <cmsannotation type="cmsannotation" annotationid="Crypto.com" comment="subhead2" text="Crypto.com">Crypto.com</cmsannotation> Crypto.com, one of the largest cryptocurrency exchanges, was also affected by a data breach in January 2022. While only 438 users of the exchange were hit in the breach, the attackers initiated an unauthorized withdrawal of $35 million in bitcoin and Ether. The company <a href="https://www.forbes.com/sites/thomasbrewster/2022/01/20/cryptocom-admits-35-million-hack/?sh=4d35eed47513">claimed</a> that it was able to prevent the unauthorized withdrawal in “majority cases” and all other customers were fully reimbursed. <cmsannotation type="cmsannotation" annotationid="Samsung" comment="subhead2" text="Samsung">Samsung</cmsannotation> Smartphone giant Samsung was breached twice in 2022 – once in March and once in August. During the <a href="https://techcrunch.com/2022/03/07/samsung-breach-source-code/">first breach</a>, 200 gigabytes of confidential data were obtained, including source code related to Galaxy devices. In the second <a href="https://techcrunch.com/2022/09/06/parsing-samsung-july-breach-notice/">data breach</a>, the personal information of customers, such as name, contact and demographic information, date of birth, and product registration information, was obtained by the attackers. <cmsannotation type="cmsannotation" annotationid="Cash App" comment="subhead2" text="Cash App">Cash App</cmsannotation> Mobile payments app Cash App revealed a data breach in 2022 by a former employee who accessed reports that contained information about its US customers. While the company did not reveal how many users were affected by the breach, it <a href="https://www.usatoday.com/story/money/2022/04/06/cash-app-data-breach/9490327002/">revealed</a> that it is contacting 8.2 million current and former customers about the data breach. <cmsannotation type="cmsannotation" annotationid="SuperVPN, GeckoVPN and ChatVPN" comment="subhead2" text="SuperVPN, GeckoVPN and ChatVPN">SuperVPN, GeckoVPN and ChatVPN</cmsannotation> A massive data breach affected the information of over 21 million customers of three VPN apps – SuperVPN, GeckoVPN, and ChatVPN. A database containing information on users of these apps was being <a href="https://www.kaspersky.co.in/blog/supervpn-geckovpn-chatvopn-leak/22614/">sold online</a>. The data included email addresses, passwords, names, and information about the users’ countries. <cmsannotation type="cmsannotation" annotationid="Cleartrip" comment="subhead2" text="Cleartrip">Cleartrip</cmsannotation> Popular travel booking platform Cleartrip <a href="https://techcrunch.com/2022/07/18/cleartrip-data-breach-dark-web/">confirmed</a> a data breach in July 2022. The data was reportedly sold on a private forum on the dark web. While the company did not reveal the number of users affected and the data obtained, it informed users that some parts of their profiles were compromised. It also advised users to reset their passwords as a “precautionary measure.” <cmsannotation type="cmsannotation" annotationid="Twitter" comment="subhead2" text="Twitter">Twitter</cmsannotation> Popular social media platform Twitter was also affected by a data breach in 2022. In a <a href="https://privacy.twitter.com/en/blog/2022/an-issue-affecting-some-anonymous-accounts">blog post</a>, the company confirmed the data breach and revealed that this was due to an update to the company’s code in June 2021. The breach <a href="https://www.engadget.com/twitter-data-for-54-million-users-leaked-online-095040426.html">reportedly</a> affected 5.4 million active users and over a million suspended users. <cmsannotation type="cmsannotation" annotationid="LastPass" comment="subhead2" text="LastPass">LastPass</cmsannotation> Popular password manager LastPass <a href="https://blog.lastpass.com/2022/11/notice-of-recent-security-incident/">confirmed</a> a data breach in November 2022. The attacker obtained access to certain information of customers, but customer passwords were reportedly not affected in the data breach. An attacker obtained access to an employee account and used it to access third-party cloud storage used by LastPass. <cmsannotation type="cmsannotation" annotationid="Rockstar Games" comment="subhead2" text="Rockstar Games"><keyword id="345849" type="General" weightage="20" keywordseo="rockstar-games" source="Orion">Rockstar Games</keyword></cmsannotation> Rockstar Games, the company behind the popular Grand Theft Auto series, was also affected by a data breach in 2022. While customer data was not affected, attackers leaked footage of its upcoming GTA VI title. The attacker has also claimed the game’s source code. Rockstar <a href="https://twitter.com/RockstarGames/status/1571849091860029455">confirmed</a> the data breach and revealed that early development footage of GTA VI was illegally downloaded from its systems. SEE ALSO: <a href="https://www.businessinsider.in/tech/apps/news/how-to-delete-your-number-and-email-from-facebooks-database/articleshow/95349999.cms">How to delete your number and email from Facebook’s database</a> <a href="https://www.businessinsider.in/tech/mobile/news/upcoming-new-apple-iphone-in-2023/articleshow/96242473.cms">The iPhone 15 series is expected to feature a USB Type-C port, A17 chipset, and a revamped design</a> <a href="https://www.businessinsider.in/tech/news/what-is-chatgpt-and-how-does-it-work/articleshow/95994901.cms">ChatGPT is a new AI chatbot that can find mistakes in your code or write a story for you</a>

From Twitter, Samsung to Rockstar Games, here are the top data breaches of 2022

<ul><li>A new <keyword id="6360618" type="UNKNOWN" weightage="20" keywordseo="data-leak">data leak</keyword> shows that 4 lakh Indian debit and credit cards of Indian banking customers are for sale on the <keyword id="1929208" type="PERSON" weightage="20" keywordseo="dark-web">dark web</keyword>. </li><li>The report by Singapore-based Group IB claims that the cards are being sold for $9 apiece with the overall value of the database estimated to exceed $4.2 million. </li><li>Group IB believes that the details were likely stolen by tracking online transactions, not by skimming details from cards used at ATMs. </li></ul>Another four lakh credit and <keyword id="6356475" type="UNKNOWN" weightage="20" keywordseo="debit-card">debit card</keyword> details are up for sale on the dark web, and 98% of them belong to customers from Indian banks. A report by Singapore-based security firm <a href="https://www.group-ib.com/media/india-banks-cards/">Group IB</a> claims that the payment details were up for sale on Joker’s Stash — a secretive portal on the dark web for hackers to sell card dumps. “The underground market value of the database is estimated at more than $4.2 million,” said the report stating that each card was being sold for $9 apiece. The 461,976 payment records include exposed card numbers, expiration dates, and CVV codes. Others have additional information like cardholders’ full names, emails, phone numbers and addresses. The data can be used to make fraudulent transactions, especially if the accompanying phone numbers is included. The cybersecurity firm was unable to determine the source of the leak. However, they have passed on the information to India’s Computer Emergency Response Team (CERT-In) so that they can take the necessary steps. The database is named “INDIA-BIG-MIX” and was uploaded on 5 February 2020. The data was likely compromised online According to Group IB, the information found in the database was likely compromised online. That’s what makes it different from the data leak from last year. “In the current case, we are dealing with so-called fullz… with the use of phishing, malware or JS-sniffers,” said Group IB. In October 2019— when the same portal was found to be <a href="https://www.businessinsider.in/india/news/bank-details-of-1-3-million-indians-is-up-for-sale-on-the-dark-web/articleshow/71829700.cms">selling the debit and credit card data of 1.3 million Indian banking customers</a> — the firm believed that the information was stolen from magnetic stripes on cards. “Early data analysis suggests the card details may have been obtained via skimming devices, installed either on ATMs or point of sale (PoS) systems,” said the Group IB’s earlier report. See also: <a href="https://www.businessinsider.in/india/news/bank-details-of-1-3-million-indians-is-up-for-sale-on-the-dark-web/articleshow/71829700.cms">Bank details of 1.3 million Indians is up for sale on the dark web</a> <a href="https://www.businessinsider.in/tech/news/biggest-data-breaches-of-2019-to-affect-india/articleshow/72465865.cms">Biggest data leaks of 2019 that hit Indians</a> <a href="https://www.businessinsider.in/policy/news/rbis-new-cybersecurity-guidelines-are-pushing-indias-1574-urban-cooperative-banks-to-bring-digital-services-up-to-snuff/articleshow/72381380.cms">RBI's new cybersecurity guidelines are pushing India's 1,574 urban cooperative banks to bring digital services up to snuff</a>

4 lakh Indian debit and credit cards are selling for $9 apiece on the dark web

<ul><li>Only 19% of Indian companies have a sufficient budget to have the desired level of cyber security. </li><li>32% organizations believe careless employees are the targets of cyber attacks. </li><li>India has been the target of mass scale data breaches and cyber security attacks.</li></ul>Despite an increase in large-scale cyber attacks, a majority of Indian companies seem unprepared to tackle these challenges, a recent report has warned. One of India’s biggest digitization drive – <a href="https://www.thenewsminute.com/article/india-saw-world-s-largest-online-data-breach-2018-due-lax-cyber-security-wef-95141">Aadhar</a> – became the target of the world’s biggest data breach in the past <a href="https://www.businessinsider.in/here-are-the-most-controversial-data-breaches-of-2018-that-affected-indian-users/articleshow/67148364.cms">year</a>, showing the rising importance of cyber security in India. A World Economic Forum report said that the breach was due to India’s “lax cyber security protocols”. Over the years, India has been a target of mass cyber security attacks like ransomware WannaCry, even then the country’s business organization have not stepped up their game to secure themselves from such attacks. The EY Global Information Security Survey (EY GISS) 2018-19 – India edition released last week said only 19% of Indian companies have a sufficient budget to provide the levels of cybersecurity and resilience as required even though said 70% said they plan to increase the budgets soon. Moreover, the report also said that 32% of Indian organizations see careless/unaware employees as the biggest vulnerability to cyber security risks. It also said that 56% of the organizations consider cyber security as an integral part of their strategy and plans, however there is a shortage of required skills or talent in India to tackle cyber security challenges. Given India’s fast-growing affinity towards technology and its services, it is important that the country’s businesses take more active steps towards cyber security. “As we accelerate towards becoming a trillion-dollar digital economy, building the right framework for cyber resilience and security is critical for the country. The government on its part has taken a number of initiatives in this direction; however, the involvement of each citizen and all organizations to make it a collective and coordinated movement is must for the success of the cyber secure eco system,” said Dr. Gulshan Rai, cyber-security chief with the Indian government. India currently ranks 15th in a list of the world’s least secure countries with respect to cyber security, according to a <a href="https://www.indiatoday.in/india/story/india-cybersecurity-privacy-data-breach-crypto-hackers-aadhaar-1450572-2019-02-07">study</a> conducted by security portal Comparitech. See Also: <a href="https://www.businessinsider.in/here-are-the-most-controversial-data-breaches-of-2018-that-affected-indian-users/articleshow/67148364.cms">Here are the most controversial data breaches of 2018 that affected Indian users</a> <a href="https://www.businessinsider.in/indias-armed-forces-are-setting-up-a-dedicated-agency-to-fight-cyber-attacks/articleshow/67542126.cms">India's armed forces are setting up a dedicated agency to fight cyber attacks</a> <a href="https://www.businessinsider.in/over-15700-indian-websites-have-been-hacked-so-far-in-2018-which-is-nearly-half-the-number-of-hacks-that-happened-last-year/articleshow/67075038.cms">India has seen 15,700 website hacks so far in 2018, nearly half the number from last year: report</a>

A majority of Indian corporates are unprepared for cyber security challenges: Report

Here are the most controversial data breaches of 2018 that affected Indian users

(Image Credit- Reuters) Amid concerns of rising security threats globally, India has had its fair share of hacking-related incidents compromising user information in 2018. Not only does this ask for tighter security laws but also for better data governance. Globally, India saw the second highest number of data breaches, according to <a href="https://timesofindia.indiatimes.com/business/india-business/data-breach-in-india-second-highest-after-us-in-h12018-gemalto/articleshow/66227056.cms">report</a> by digital security firm Gemalto. Here are the most controversial incidents that left the data of Indian users vulnerable this year: 
	
	
	<div type="Slideshow" msid="67155541" hostid="261" title="Here are the most controversial data breaches of 2018 that affected Indian users" firstImageMsid="67155542" slideCount="6"></div>

<ul><li>The CSC <keyword id="9325628" type="UNKNOWN" weightage="20" keywordseo="BHIM-data-breach">BHIM data breach</keyword> includes extremely sensitive information like Aadhaar details with complete scans of the Aadhaar cards, biometric details, addresses, date of birth and more.</li><li>In total, over 7 million records of millions users were exposed.</li><li>CERT-In, which was notified of the leak on May 5, had reportedly fixed it on May 22.</li></ul>Over 7 million records of user transactions on the CSC BHIM website were left unsecured as per a report Israeli cybersecurity website vpnMentor. These records include Aadhaar card numbers, PAN numbers, and even biometric details in a data bundle of 409 GB. According to the <a href="https://www.vpnmentor.com/blog/report-csc-bhim-leak/">report</a>, the CSC BHIM data breach includes personal data such as Aadhaar details, addresses, bank records, caste certificate and a complete personal profile of the users. <div type="Article" hostid="261" msid="63924186" title="Indian government portal leaks 8.9mn Aadhaar details, again" mstype="2" mssubtype="0"></div> The data breach has since been patched up but the data was out there for anyone who knew where to look for over a year. However, the National Payments Corporation of India denies that there has been any incident. “We would like to clarify that there has been no data compromise at <keyword id="4013165" type="PERSON" weightage="20" keywordseo="BHIM-app">BHIM App</keyword> and request everyone to not fall prey to such speculations. NPCI follows high level of security and an integrated approach to protect its infrastructure and continue to provide a robust payments ecosystem,” it said. How bad is the BHIM data breach? The cybersecurity researchers believe that the combination of data left exposed could give hackers the ability to carry out identity theft, tax fraud, monetary theft, among other illegal activities. The research team led by Noam Rotem and Ran Locar describe the data breach as being akin to a hacker gaining access to the entire data infrastructure of a bank and detailed information about its users’ account information. “The sheer volume of sensitive, private data exposed, along with UPI IDs, document scans, and more, makes this breach deeply concerning,” said the report explaining the seriousness of the data breach. They assert that using the above details of the personal data about an individual, from their names and dates of birth to biometric details and ID numbers, could give third-party onlookers a complete profile of an individual — including a look into their finances and banking records. “It would be incredibly valuable to hackers… This data would make illegally accessing those accounts much easier,” said the report. With complete profiles of BHIM users being leaked, it leaves them extremely vulnerable to all sorts of frauds and theft. The risks for affected users can exceed just monetary loss – there is a high risk of identity theft, especially since almost all personal data has been exposed. “The scale of the exposed data is extraordinary, affecting millions of people all over India and exposing them to potentially devastating fraud, theft, and attack from hackers and cybercriminals,” it added, suggesting that the breach is likely very invasive. How and when was BHIM UPI’s data breached? The cybersecurity researchers claim that 409 GB of data was stored on an unsecured Amazon Web Services (AWS) S3 bucket exposing records from February 2019. “S3 buckets are a popular form of cloud storage across the world but require developers to set up the security protocols on their accounts,” said the report. The research team at vpnMentor discovered the BHIM data breach on April 23 and contacted India’s Computer Emergency Response Team (CERT-In) on May 5. The data leak was finally fixed by the authorities on May 22, leaving the breach exposed for an entire month after it was discovered. <table style="border-width: initial; border-style: none; width: 451.276pt; table-layout: fixed;"></colgroup><tbody><tr><td colspan="2" style="border-left:solid #000000 1pt;border-right:solid #000000 1pt;border-bottom:solid #000000 1pt;border-top:solid #000000 1pt;vertical-align:top;padding:5pt 5pt 5pt 5pt;overflow:hidden;overflow-wrap:break-word;">Timeline of the data breach </td></tr><tr><td style="border-left:solid #000000 1pt;border-right:solid #000000 1pt;border-bottom:solid #000000 1pt;border-top:solid #000000 1pt;vertical-align:top;padding:5pt 5pt 5pt 5pt;overflow:hidden;overflow-wrap:break-word;">Date discovered </td><td style="border-left:solid #000000 1pt;border-right:solid #000000 1pt;border-bottom:solid #000000 1pt;border-top:solid #000000 1pt;vertical-align:top;padding:5pt 5pt 5pt 5pt;overflow:hidden;overflow-wrap:break-word;">April 23, 2020 </td></tr><tr><td style="border-left:solid #000000 1pt;border-right:solid #000000 1pt;border-bottom:solid #000000 1pt;border-top:solid #000000 1pt;vertical-align:top;padding:5pt 5pt 5pt 5pt;overflow:hidden;overflow-wrap:break-word;">Contact with CERT-In </td><td style="border-left:solid #000000 1pt;border-right:solid #000000 1pt;border-bottom:solid #000000 1pt;border-top:solid #000000 1pt;vertical-align:top;padding:5pt 5pt 5pt 5pt;overflow:hidden;overflow-wrap:break-word;">April 28, 2020 </td></tr><tr><td style="border-left:solid #000000 1pt;border-right:solid #000000 1pt;border-bottom:solid #000000 1pt;border-top:solid #000000 1pt;vertical-align:top;padding:5pt 5pt 5pt 5pt;overflow:hidden;overflow-wrap:break-word;">Response from CERT-In </td><td style="border-left:solid #000000 1pt;border-right:solid #000000 1pt;border-bottom:solid #000000 1pt;border-top:solid #000000 1pt;vertical-align:top;padding:5pt 5pt 5pt 5pt;overflow:hidden;overflow-wrap:break-word;">April 29, 2020 </td></tr><tr><td style="border-left:solid #000000 1pt;border-right:solid #000000 1pt;border-bottom:solid #000000 1pt;border-top:solid #000000 1pt;vertical-align:top;padding:5pt 5pt 5pt 5pt;overflow:hidden;overflow-wrap:break-word;">Contact with company </td><td style="border-left:solid #000000 1pt;border-right:solid #000000 1pt;border-bottom:solid #000000 1pt;border-top:solid #000000 1pt;vertical-align:top;padding:5pt 5pt 5pt 5pt;overflow:hidden;overflow-wrap:break-word;">May 5, 2020 </td></tr><tr><td style="border-left:solid #000000 1pt;border-right:solid #000000 1pt;border-bottom:solid #000000 1pt;border-top:solid #000000 1pt;vertical-align:top;padding:5pt 5pt 5pt 5pt;overflow:hidden;overflow-wrap:break-word;">Second contact with CERT-In </td><td style="border-left:solid #000000 1pt;border-right:solid #000000 1pt;border-bottom:solid #000000 1pt;border-top:solid #000000 1pt;vertical-align:top;padding:5pt 5pt 5pt 5pt;overflow:hidden;overflow-wrap:break-word;">May 22, 2020 </td></tr><tr><td style="border-left:solid #000000 1pt;border-right:solid #000000 1pt;border-bottom:solid #000000 1pt;border-top:solid #000000 1pt;vertical-align:top;padding:5pt 5pt 5pt 5pt;overflow:hidden;overflow-wrap:break-word;">Data of rectification </td><td style="border-left:solid #000000 1pt;border-right:solid #000000 1pt;border-bottom:solid #000000 1pt;border-top:solid #000000 1pt;vertical-align:top;padding:5pt 5pt 5pt 5pt;overflow:hidden;overflow-wrap:break-word;">May 22, 2020* </td></tr></tbody></table> *Assumed day of rectification after no reply from CERT-In Source: VPNMentor What can you do? Unfortunately, there’s not much you can do on your end right now. If you are unsure about your data safety, you can contact CSC e-Governance Services, which is a special division set up under the Ministry of Electronics &amp; IT. The NPCI maintains that their systems are robust and no data breach occurred to begin with despite evidence posted by the vpnMentor's cybersecurity team. SEE ALSO: <a href="https://www.businessinsider.in/indian-government-portal-leaks-8-9mn-aadhaar-details-again/articleshow/63924186.cms">Indian government portal leaks 8.9mn Aadhaar details, again</a> <a href="https://www.businessinsider.in/slideshows/here-are-the-most-controversial-data-breaches-of-2018-that-affected-indian-users/slidelist/67155541.cms">Here are the most controversial data breaches of 2018 that affected Indian users</a> <a href="https://www.businessinsider.com/r-new-data-leak-hits-indias-national-id-card-database-aadhaar-zdnet-2018-3?IR=T">New data leak hits India's national ID card database Aadhaar: ZDNet</a>

CSC BHIM site left Aadhaar cards, PAN numbers, and biometric information exposed — could be used to carry out financial fraud and identity theft, says report

As we purchase more online and swipe cards more often, we are contributing to a cashless economy which is more efficient. But it comes with various risks like data misuse. Financial data is one of the most sought-after information by online criminals and there have been many <a href="https://www.businessinsider.in/biggest-data-breaches-of-2019-to-affect-india/articleshow/72465865.cms">data leaks in 2019</a> to show that no information is safe. As per a recent <a href="https://www.businessinsider.in/tech/news/4-lakh-indian-debit-and-credit-cards-are-selling-for-9-apiece-on-the-dark-web/articleshow/74028856.cms">report</a>, over 4 lakh Indian debit and credit cards were available on the <keyword id="1929208" type="PERSON" weightage="20" keywordseo="dark-web">dark web</keyword> for $9 each. You can read <a href="https://www.businessinsider.in/tech/news/here-is-what-happens-your-credit/debit-card-number-name-and-cvv-end-up-on-the-dark-web/articleshow/74058814.cms?src=hp_tech">here</a> how your financial data reaches the dark web and what happens to it. In this post, we will explain what steps you can take to prevent your debit and <keyword id="6368202" type="UNKNOWN" weightage="20" keywordseo="credit-card">credit card</keyword> information from reaching the dark web. How is financial data stolen Financial data can be stolen in <a href="https://www.businessinsider.in/tech/news/microsoft-dropbox-and-linkedin-are-the-biggest-targets-for-phishing-attacks/articleshow/72492998.cms">phishing attacks</a>, <a href="https://www.businessinsider.in/tech/news/airtel-data-breach-exposes-personal-data-of-32-crore-subscribers/articleshow/72428075.cms">data breaches</a>, skimming and other <a href="https://www.businessinsider.in/biggest-data-breaches-of-2019-to-affect-india/articleshow/72465865.cms">leaks</a>. Phishing attacks Phishing is aimed at collecting usernames, passwords and other personal information of users. It is usually done using an email or a message that contains a link or an attachment. The sender pretends to be a trustworthy entity such as a company or bank. Data breaches Data breaches occur when the user data stored with companies and websites is stolen using phishing, malware, or JS-sniffers. Under attacks like this, user data such as customer name, number, address and payment details are stolen. So, one should be careful about the entities that possess their basic information. Skimming In this, skimmers are attached to ATMs and card machines to steal your card details so they can access your account. They use the obtained details to clone your card and run up charges on your account. How to protect you debit and credit card from getting stolen Here are some tips that will help you to protect your financial information from getting stolen. Check ATM machines for skimmers <div type="image" title="ATM Skimmer" msid="74061252" hostid="261"></div>

 When you are at the at the ATM, you can check for skimmers in the following ways: <ul><li>Check the ATM card reader for tape or glue residue. </li><li>Check if anything is hanging from the ATM. </li><li>Wiggle the card slot for loose-fitting attachments. </li></ul>Monitor your transactions Regularly check your account statements and card reports for suspicious transactions. If you find even a small transaction that wasn’t done by you, immediately inform your bank and get the card blocked. Do not use shady websites If you are getting a deal that you think is too good to be true or a new website is offering you great deals, do not fall for such tricks and purchase items only from known and trustworthy websites. Be careful with emails Phishing attacks are often carried out by sending attachments or links via email. Avoid clicking on suspicious links and attachments and only click on emails from trusted sources. Do not share your card details If anyone calls you claiming that they work for your bank and ask you for your card details, do not provide any information about your bank account or cards. Call up your bank and share the phone number from which you received the call. See also: <a href="https://www.businessinsider.in/tech/news/here-is-what-happens-your-credit/debit-card-number-name-and-cvv-end-up-on-the-dark-web/articleshow/74058814.cms?src=hp_tech">Here is what happens when your credit/debit card number, name and CVV end up on the dark web</a> <a href="https://www.businessinsider.in/4-lakh-indian-debit-and-credit-cards-are-selling-for-9-apiece-on-the-dark-web/articleshow/74028856.cms">4 lakh Indian debit and credit cards are selling for $9 apiece on the dark web</a> <a href="https://www.businessinsider.in/biggest-data-breaches-of-2019-to-affect-india/articleshow/72465865.cms">Biggest data leaks of 2019 that hit Indians</a>

How to stop your debit/credit card information from reaching the dark web

Biggest data breaches of 2019

The Reserve Bank on Wednesday asked non-bank finance companies to broad-base their <keyword id="60356" type="General" weightage="20" keywordseo="fundraising" source="Orion">fundraising</keyword> to limit reliance on <keyword id="6368751" type="General" weightage="20" keywordseo="banks" source="Orion">banks</keyword> as it called for strengthening balance sheets and guarding against frauds and data breaches. According to the report 'Trend and Progress of Banking in India 2022-23' released by the <keyword id="30067" type="General" weightage="20" keywordseo="rbi" source="Orion">RBI</keyword>, the <keyword id="183986" type="General" weightage="20" keywordseo="indian-banking-system" source="Orion">Indian banking system</keyword> and <keyword id="6354598" type="General" weightage="20" keywordseo="nbfcs" source="Orion">NBFCs</keyword> remain sound and resilient, backed by high capital ratios, strengthening asset quality and robust earnings growth. The consolidated balance sheet of scheduled commercial banks (SCBs) in 2022-23 expanded by 12.2 per cent, driven by credit to retail and services sectors. Deposit growth also picked up, although it trailed credit growth, it said. Looking ahead, it said, "Given the increasing interconnectedness between banks and NBFCs, the latter should focus on broadbasing their funding sources and reduce overdependence on bank funding. Banks and non-banks both, need to bring in greater empathy in their customer services". The concerted efforts are needed by all stakeholders to protect the banking and payments system from the risks of fraud and data breaches emanating from cyber threats, the report added. "Overall, banks and NBFCs need to further strengthen their balance sheets through robust governance and risk management practices to meet the growing aspirations of the Indian economy," it said. As per the report, the improvement in asset quality of banks that began in 2018-19 continued during 2022-23, and even in the first half (April-September) of 2023-24, the gross non-performing assets (GNPA) ratio stood at 3.2 per cent. Higher net interest income and lower provisioning boosted net interest margin (NIM) and profitability in 2022-23, it said.

RBI asks NBFCs to broad-base fundraising, reduce dependence on banks

Normally, access to the internet is considered a boon. But it’s not without its costs. Data is becoming more valuable by the day and for someone looking to make money in nefarious ways. Hacking is the new trend in town. Information theft is the most expensive and fastest-rising consequence of cybercrime. Personal and sensitive data of millions of people is compromised and in exchange for a quick buck. Cybercriminals are constantly adapting and finding new ways to compromise online security, quicker than security firms can build solutions to defend against them. But not every data breach is a result of hackers. More often than not, ‘loopholes’ and unprotected servers give bad actors access without even having to break-in. And, it’s only becoming more common. Here are some of the biggest data breaches of 2019 that affected users in India:

Biggest data leaks of 2019 that hit Indians

Data Breaches and Cybersecurity

<ul><li>Indian pharmaceutical company <keyword id="46698" type="CITY" weightage="20" keywordseo="Lupin">Lupin</keyword> has confirmed an ‘information security incident’ that has affected multiple internal systems.</li><li>The incident comes within weeks of a ransomware attack on Dr Reddy’s Laboratories. </li><li>The average cost of a data breach in the healthcare industry is $7.3 million — 84% higher than the global average across all sectors.</li></ul>Another leading Indian pharmaceutical, Lupin, has reported a cybersecurity attack on its IT systems within two weeks of a ransomware attack on Dr Reddy’s Laboratories. “We have recently experienced an information security incident that has affected several of our internal IT systems. This has not impacted our core systems and operations,” Lupin told <a href="https://www.thehindubusinessline.com/companies/lupin-confirms-security-incident-days-after-dr-reddys-cyber-attack/article33029527.ece">Hindu Business Line</a> in a statement. In October, Dr Reddy’s Laboratories had to ‘isolate’ its servers and took ‘preventive actions’ in the wake of a ransomware attack. The attack also <a href="https://www.businessinsider.in/india/news/dr-reddys-shares-fell-over-3-the-drug-maker-isolated-all-data-service-centers-after-a-cyber-attack/articleshow/78806238.cms">reportedly</a> forced the company to shut down its manufacturing facilities across the world to minimise the attack’s impact. The incidence of hackers trying to breach the firewalls of the healthcare industry have only increased during the coronavirus pandemic.To be fair, the Indian healthcare industry isn’t particularly careful about connecting to the internet. For instance, in June, the CEO of Hackrew and IIT Guwahati graduate <a href="https://medium.com/bugbountywriteup/how-screwed-is-indian-healthcare-data-fa4584be8a04">Sai Krishna Kothapalli</a> was able to view, edit and delete classified personal information of lakhs of patients all over India. Healthcare industry faces the most expensive data breaches “Financially motivated criminal groups continue to target this industry via ransomware attacks,” said Verizon’s annual Data Breach Investigations Report 2020. To make matters worse, the average cost of a <keyword id="10183471" type="UNKNOWN" weightage="20" keywordseo="cybersecurity-breach">cybersecurity breach</keyword> in the healthcare industry is higher than any other sector at a whopping $7.3 million. <div type="image" title="Average total cost of a data breach by industry (1)" msid="79061658" hostid="261" caption="&amp;lt;p&amp;gt;Average total cost of a data breach by industry&amp;lt;/p&amp;gt;"></div> Even though this figure varies across geographies, the average cost of a <keyword id="10226939" type="UNKNOWN" weightage="20" keywordseo="data-breach-in-healthcare">data breach in healthcare</keyword> has been the most expensive for over a decade, according to <a href="https://www.ibm.com/in-en/security/data-breach">IBM’s Cost of a Data Breach 2020</a> report. This year was a 10% increase over 2019 and 84% higher than the global average. Healthcare industry takes nearly a year to track down cybersecurity issues While some data breaches can be attributed to human error or a system glitch, already 50% of them in the healthcare sector are due to malicious attacks. The healthcare industry also takes the longest amount of time to detect a breach and then contain the attack. IBM pegs the average time to around 329 days — that’s nearly a full year of data being exposed. <div type="image" title="Average time to identify and contain a data breach by industry" msid="79061682" hostid="261" caption="&amp;lt;p&amp;gt;Average time to identify and contain a data breach by industry&amp;lt;/p&amp;gt;"></div> However, India is not alone in its struggle. Other countries around the world are also grappling with the new onslaught of cyberattacks in the healthcare sector. Germany, for example, is trying to get ahead of the curve by enacting a new law for patient data protection and increased digitisation in health. In July, it already <a href="https://www.insideprivacy.com/health-privacy/germany-prepares-new-law-for-patient-data-protection-and-increased-digitalisation-in-healthcare-and-for-data-donations-for-research-purposes/">passed the draft bill</a> and is expected to come into force before the end of the year. SEE ALSO: <a href="https://www.businessinsider.in/defense/news/india-is-willing-to-challenge-the-status-quo-says-defence-minister-while-outlining-the-four-core-principles-behind-the-countrys-security-policy/articleshow/79059040.cms">India is willing to challenge the status quo and protect against ‘unilateralism and aggression,’ says Defence Minister Rajnath Singh</a> <a href="https://www.businessinsider.in/science/environment/news/india-demands-environment-friendly-technology-to-be-made-available-at-affordable-prices-to-battle-climate-change/articleshow/79056886.cms">India demands environment-friendly technology to be made available at affordable prices to battle climate change</a> <a href="https://www.businessinsider.in/finance/banks/news/rbi-and-indian-banks-wait-as-supreme-court-adjourns-loan-moratorium-hearing-to-november-18/articleshow/79057919.cms">RBI and banks caught in the crosshairs as the Supreme Court adjourns loan moratorium hearing for a second time to November 18</a>

Another Indian pharmaceutical giant reports cybersecurity breach within two weeks of ransomware hack on Dr Reddy’s

<ul><li>SRBC &amp; CO, an EY affiliated company, is accused of sharing sensitive data over emails and with third parties by Infibeam Avenues. </li><li>Infibeam has its own problems with its stock opening to an 8% dip on Monday after reports of the <keyword id="608402" type="PERSON" weightage="20" keywordseo="data-breach">data breach</keyword> came in over the weekend. </li><li>SRBC &amp; CO is "strongly" denying the allegations while Infibeam is citing "breach of trust" and "loss of faith."</li></ul>A chartered accountancy firm, SRBC &amp; Co — known for being affiliated to Ernst &amp; Young (EY) — is "strongly" denying the allegations of a data breach. But, Infibeam Avenues — a digital company in India that deals with online transactions and e-commerce — is still terminating its contract with the accounting firm, according to stock market filings seen by the <a href="https://www.cnbctv18.com/information-technology/infibeam-fires-auditor-for-sharing-price-sensitive-info-3203941.htm">Press Trust of India.</a> 
 <div type="ExtQuote" text="We strongly deny the allegations against us. We have conducted a comprehensive investigation in the matter and stand by our findings. We are confident of our position and are open to a third party/regulatory inspection in the matter and will respond to the regulators, as required." auname="SRBC &amp; Co Statement"></div>



 Infibeam — a digital company in India that deal with online transaction and e-commerce — informed the Indian stock exchanges that its auditor SRBC &amp; Co, shared unpublished price sensitive information (UPSI) over emails and with third parties not once, but multiple times. And, as the stock markets opened Monday morning, its stock price plummeted by almost 8% to ₹40 per share before recovering. The National Stock Exchange (NSE) and the <keyword id="43628" type="CITY" weightage="20" keywordseo="Bombay-stock-exchange">Bombay Stock Exchange</keyword> (BSE) — two of India’s biggest stock markets — are yet to act on the issue but Infibeam maintains that there has been a breach of trust and loss of faith. 
 <div type="ExtQuote" text="The board was not convinced with the auditor's explanations, processes and conduct leading to unauthorised sharing of company UPSI. Thus in the interest of the company and with board approval, the auditors were terminated." auname="Infibeam Avenues statement"></div>



 The relationship between Infibeam Avenues and SRBC &amp; Co is dates back to the merger between Avenues India and Infibeam. The accused had raised several alarms over Avenues India’s payment gateway. For one, ₹240 million of the <a href="https://m.dailyhunt.in/news/india/english/entrackr+english-epaper-entrackr/auditor+alarms+concerns+over+advance+payments+to+vendors+and+revenue+filed+by+infibeam+in+q3-newsid-109043718">reported</a> revenue by Infibeam in December 2018 actually belonged in the first and second quarters of the financial year according to the auditors asking Infibeam to clarify its calculation processes. Even in the market, things haven’t been the smoothest for Infibeam, where its stock prices <a href="https://economictimes.indiatimes.com/markets/stocks/news/how-a-whatsapp-note-triggers-crash-in-infibeam-avenue/articleshow/66002863.cms">dipped</a> by 75% in the last financial year. After SRBC &amp; Co’s termination, accounting firm Shah &amp; Taparia will continue on as auditors for the company. The public scrutiny has a detrimental effect on SRBC &amp; Co’s reputation as well as EY in light of IL&amp;FS defaulting on its payments to lenders. EY, along with PwC, <keyword id="6358918" type="COMPANY" weightage="20" keywordseo="deloitte">Deloitte</keyword> and KPMG, have been <a href="https://www.livemint.com/companies/news/govt-likely-to-ban-deloitte-for-five-years-for-alleged-malpractice-in-il-fs-accounts-1556425159041.html">asked to refrain</a> from practicing law until otherwise specified as well as disclose all of their financial details and dealings with IL&amp;FS. In fact, the biggest financial scandal of 2018 may end up costing Deloitte <a href="https://www.businessinsider.in/the-biggest-financial-scandal-of-2018-may-cost-deloitte-five-years-of-business-in-india/articleshow/69090512.cms">five years of business in India.</a> See also: <a href="https://www.businessinsider.in/the-biggest-financial-scandal-of-2018-may-cost-deloitte-five-years-of-business-in-india/articleshow/69090512.cms">The biggest financial scandal of 2018 may cost Deloitte five years of business in India</a> <a href="https://www.businessinsider.in/here-are-the-most-controversial-data-breaches-of-2018-that-affected-indian-users/articleshow/67148364.cms">Here are the most controversial data breaches of 2018 that affected Indian users</a> <a href="https://www.businessinsider.in/sbi-data-breach-leaves-millions-of-users-data-exposed/articleshow/67767832.cms">India’s largest bank leaves the data of millions of users exposed</a>

You Searched For "indian bank data breach" and got 15 results

India’s largest bank leaves the data of millions of users exposed

Prabhjote Gill

Discount broker Upstox suffers data breach – Aadhaar, PAN and bank account numbers leaked

Rounak Jain

From Twitter, Samsung to Rockstar Games, here are the top data breaches of 2022

Sourabh Jain

4 lakh Indian debit and credit cards are selling for $9 apiece on the dark web

Prabhjote Gill

A majority of Indian corporates are unprepared for cyber security challenges: Report

Sanchita Dash

Here are the most controversial data breaches of 2018 that affected Indian users

Here are the most controversial data breaches of 2018 that affected Indian users

BI India Bureau

CSC BHIM site left Aadhaar cards, PAN numbers, and biometric information exposed — could be used to carry out financial fraud and identity theft, says report

Rounak

Prabhjote

How to stop your debit/credit card information from reaching the dark web

Rounak Jain

Biggest data breaches of 2019

RBI asks NBFCs to broad-base fundraising, reduce dependence on banks

PTI

Biggest data leaks of 2019 that hit Indians

Prabhjote Gill

Data Breaches and Cybersecurity

Another Indian pharmaceutical giant reports cybersecurity breach within two weeks of ransomware hack on Dr Reddy’s

Prabhjote Gill

Indian e-commerce firm Infibeam fires its auditor for alleged data breach — stock tanks as much as 8%

Prabhjote Gill

Popular Keywords

Buying Guides