Best printers for Home

Best Mixer Grinder

Best wired Earphones

Best 43 Inch TV in India

Best Wi Fi Routers

Best Home Theatre in India

Smart Watch under 5000

Best Laptops for Education

Best Laptop for Students

New Delhi, A hacker that goes by the name of <keyword id="9206309" type="UNKNOWN" weightage="20" keywordseo="shinyhunters">ShinyHunters</keyword> has now leaked data of 2.28 million users of a dating <keyword id="10649183" type="UNKNOWN" weightage="20" keywordseo="website-meetmindful">website MeetMindful</keyword> that includes real names, Facebook account tokens, email addresses and geo-location information. According to a report in ZDNet, the leaked <keyword id="14345" type="PERSON" weightage="20" keywordseo="Date">date</keyword> in a 1.2GB file has been shared as a free download on a publicly accessible hacking forum. "The content of this file includes a wealth of information that users provided when they set up profiles on the MeetMindful site and mobile apps," said the report citing a cyber security research on Sunday. The leaked data also includes body details, dating preferences, marital status, birth dates, IP addresses and Bcrypt-hashed account passwords. The message on the website reads: "This website is using a security service to protect itself from online attacks". MeetMindful was founded in 2014. For several MeetMindful users, the leaked data can be used to trace their dating profiles back to their real-world identities. The data is still available for download on the public file-hosting site where it was initially uploaded. Several hackers have been engaged in sextortion where they contact dating site users, threatening to expose their profiles to family unless they pay a ransom. ShinyHunters has been involved in several data breaches recently, including allegedly leaking sensitive data of nearly 3.25 lakh users of Delhi-NCR based global cryptocurrency exchange and wallet, BuyUcoin, on the Dark Web. ShinyHunters has also leaked 1.9 million (19 lakh) user records stolen from free online photo editing application Pixlr. According to cyber security experts, the hacker is the same who earlier leaked BigBasket and JusPay data in <keyword id="3658" type="LOCATION" weightage="20" keywordseo="India">India</keyword>. Three other Indian companies -- e-marketplace ClickIndia, <keyword id="2461546" type="DOMAIN" weightage="20" keywordseo="FinTech">fintech</keyword> startup for small business owners ChqBook and wedding planning website WedMeGood -- were also breached possibly by the same hacker. SEE ALSO: <a href="https://www.businessinsider.in/business/auto/news/an-american-electric-car-maker-explains-why-it-took-a-different-route-than-elon-musks-tesla-tata-motors-or-mahindra/articleshow/80442243.cms?upcache=2">An American electric car maker explains why it took a different route than Elon Musk’s Tesla, Tata Motors or Mahindra</a> <a href="https://www.businessinsider.in/tech/mobile/news/new-realme-stores-in-india-and-ceo-says-there-is-plan-for-new-devices/articleshow/80443801.cms">EXCLUSIVE: Realme plans to open 500 new stores in 2021⁠— the CEO reveals the company will go beyond smartphones in the 5G era</a> <a href="https://www.businessinsider.in/budget/news/indias-co-working-sector-wants-recognition-under-real-estate-tax-benefits-as-flexible-workspaces-aim-for-a-significant-revival-in-the-post-covid-era/articleshow/80431768.cms">India’s co-working sector wants recognition under real estate, tax benefits as flexible workspaces aim for a significant revival in the post-COVID era</a>

Dating site MeetMindful hacked — data of over 2 million users leaked including Facebook details and geo-location

New Delhi, After hacking masked credit and debit card data of crores of Juspay users, the same hacker possibly known as '<keyword id="9206309" type="COMPANY" weightage="20" keywordseo="shinyhunters">ShinyHunters</keyword>' is now selling databases belonging to three more Indian companies on <keyword id="1929208" type="COMPANY" weightage="20" keywordseo="dark-web">Dark Web</keyword>, independent cyber security researcher Rajshekhar Rajaharia claimed on Wednesday. According to Rajaharia who first broke the JusPay hacking, the three Indian companies are e-marketplace <keyword id="2901238" type="COMPANY" weightage="20" keywordseo="Clickindia">ClickIndia</keyword>, <keyword id="2461546" type="DOMAIN" weightage="20" keywordseo="FinTech">fintech</keyword> startup for small business owners ChqBook and wedding planning website WedMeGood. "Nearly 80 lakh users of ClickIndia (name, email, mobile and other personal details), 10 lakh users of ChqBook (name, email, mobile, full address and other personal details) and 13 lakh users of WedMeGood (name, email, hashed password, other sensitive personal information)," Rajaharia told. Like JusPay, these three companies have also not allegedly told the users about the data breach, claimed the security researcher. The names of the three Indian companies were first reported by BleepingComputer website, saying that a "data breach broker is selling the allegedly stolen user records for 26 companies on a hacker forum". ChqBook denied the attack while the other two companies were yet to react to the report. According to <keyword id="10553252" type="UNKNOWN" weightage="20" keywordseo="sonit-jain">Sonit Jain</keyword>, CEO of <keyword id="9727813" type="COMPANY" weightage="20" keywordseo="gajshield-infotech">GajShield Infotech</keyword>, such incidents, once confirmed irrespective of data sensitivity, leaves a negative impression over the digital payment platforms. "Simple data like email ID and phone number which may not look sensitive can turn out to be lethal means of financial fraud at personal level, if fallen in wrong hands," Jain told. Bengaluru-based digital payments gateway JusPay said in an earlier statement that the company verified that their Secure Data Store, which hosts the confidential card numbers, was not accessed or compromised. "Thus, all our customers were secure from any kind of risk. Our priority was to inform the merchants and as a measure of abundant precaution, they were issued fresh API keys though it was later verified that even the API keys in use were safe," the company said. According to Rajaharia, the hacker is the same who leaked <keyword id="964794" type="COMPANY" weightage="20" keywordseo="BigBasket">BigBasket</keyword> data, previously reported by the cybersecurity firm Cyble. In November last year, one of India's popular online grocery stores BigBasket, found that its data of over 20 million users had been hacked and were on sale on the dark web for over $40,000. "Now, the same hacker group is asking about $10,000 in Bitcoin for the BigBasket database and is also selling the three companies' databases," Rajaharia said. "There is a strong connection between all these recent data leaks, including BigBasket," he added. US-based third-party cyber intelligence firm Cyble claimed in its official blog that though the alleged breach occurred on October 14, it detected it on October 30, validated it on October 31 and informed BigBasket on November 1. The user database was estimated to be about 20 million, with names, email ids, password hashes, pin, contact numbers, addresses, date of birth, location and IP addresses of login. JusPay on Tuesday said that about 3.5 crore records with masked card data and card fingerprint were compromised by the hacker and the claim of 10 crore cardholders' data being affected is "incorrect". SEE ALSO: <a href="https://www.businessinsider.in/business/startups/news/boat-raises-over-100-million-from-warburg-pincus-analysts-expect-the-headphone-brand-to-double-its-revenue-to-10-billion-this-financial-year/articleshow/80126200.cms">boAt raises over $100 million from Warburg Pincus — analysts expect the headphone brand to double its revenue to ₹10 billion this financial year</a> <a href="https://www.businessinsider.in/tech/news/oneplus-fitness-band-india-launch-date-price-and-everything-you-need-to-know/articleshow/80129498.cms">OnePlus Band India launch date, price and everything you need to know</a> <a href="https://www.businessinsider.in/tech/apps/news/whatsapp-will-stop-working-if-you-do-not-agree-to-its-new-terms-and-privacy-policies/articleshow/80127866.cms">WhatsApp will stop working if you do not agree to its new terms and privacy policies</a> <a href="https://www.businessinsider.in/business/auto/news/toyota-fortuner-suv-2021-launched-in-india-with-new-price-design-and-features-check-details-here/articleshow/80129932.cms">Toyota Fortuner 2021 launched at a starting price of ₹29.98 lakh — here’s all you need to know from looks to specification and features</a>

After Juspay, ClickIndia, ChqBook and WedMeGood have been reportedly hacked — data of over 10 million users up for sale on the dark web

In yet another data breach, sensitive data of nearly 3.25 lakh users of India-based global <keyword id="6357017" type="DEFINITION" weightage="20" keywordseo="cryptocurrency">cryptocurrency</keyword> exchange and wallet, <keyword id="6238055" type="UNKNOWN" weightage="20" keywordseo="buyucoin">BuyUcoin</keyword>, have been exposed on the Dark Web. The data leaked include names, e-mails, mobile numbers, encrypted passwords, user wallet details, order details, bank details, KYC details (PAN number, passport numbers) and deposit history. According to independent cyber security researcher Rajshekhar Rajaharia, the 6GB file on MongoDB database contains three backup files containing BuyUcoin data. "This is a serious hack as key financial, banking and KYC details have been leaked on the Dark Web," Rajaharia told IANS and shared some screenshots of the leaked data. Researchers at cyber security firm Kela Research and Strategy Ltd first discovered the stolen data, linked on the same forum, from Wongnai Media Co Ltd, Tuned Global Pvt Ltd, BuyUcoin, Wappalyzer, Teespring Inc and Bonobos.com, which looks the handiwork of infamous hacking group ShinyHunters. "Over this past summer, ShinyHunters was seen publishing leaked data for free, exposing millions of personal records from all over the world," Victoria Kivilevich, threat intelligence analyst at Kela Research, told SiliconANGLE. "We have seen collaborators of Shiny Hunters selling and leaking other dumps in the recent months." BuyUcoin was yet to react to the report. ShinyHunters has also leaked 1.9 million user records stolen from free online photo editing application Pixlr. According to Rajaharia, the hacker is the same who earlier leaked BigBasket and JusPay data in India. In November last year, one of India's popular online grocery stores BigBasket found that its data of over 20 million users had been hacked and were on sale on the dark web for over $40,000. "Now, the same hacker group is asking about $10,000 in Bitcoin for the BigBasket database and is also selling the three companies' databases," Rajaharia said. "There is a strong connection between all these recent data leaks, including BigBasket," he added. Earlier this month, Bengaluru-based digital payments gateway JusPay said that about 3.5 crore records with masked card data and card fingerprint were compromised by the hacker. Rajaharia also disclosed that three Indian companies -- e-marketplace ClickIndia, fintech startup for small business owners ChqBook and wedding planning website WedMeGood -- were also hacked possibly by the same hacker. "Nearly 80 lakh users of ClickIndia (name, email, mobile and other personal details), 10 lakh users of ChqBook (name, email, mobile, full address and other personal details) and 13 lakh users of WedMeGood (name, email, hashed password, other sensitive personal information)," Rajaharia had revealed.

Cryptocurrency startup BuyUcoin hacked, data of over 3 lakh users leaked

<ul><li><keyword id="140601" type="PERSON" weightage="20" keywordseo="database">Database</keyword> of around 20 million <keyword id="2057213" type="COMPANY" weightage="20" keywordseo="Big-Basket">Big Basket</keyword> users is allegedly out on the internet. </li><li>It is the same data that was reported to be breached in November 2020. </li><li>You can check if your data has been compromised.</li></ul>Another massive database has allegedly been leaked on a popular cybercrime forum. The database is said to be of 20 million Big Basket users, which was first <a href="https://www.businessinsider.in/business/startups/news/bigbasket-the-e-grocery-startup-which-tata-group-is-eyeing-admits-a-data-breach-of-over-20-million-users/articleshow/79122791.cms">confirmed</a> by the Indian grocery delivery startup on November 7, 2020. The database includes email IDs, home addresses, phone numbers, password hashes (potentially hashed OTPs), IP addresses, date of birth and also the user-aggregator interactions done on the <keyword id="235499" type="COMPANY" weightage="20" keywordseo="APP">app</keyword>. The hacker who is said to have published the alleged Big Basket database goes by the name ShinyHunters. The database was made available for anyone to download over the weekend on a well-known cybercrime forum. ShinyHunters is the same hacking group that has started to flood a dark web hacking marketplace with databases containing a combined total of 73.2 million user records over 11 different companies, according to threat intelligence SaaS provider Cyble. The group has been operating since 2015, some of their aliases are Shiny Hunters, #TheDarkOverlord, Gnostic Players. <div type="twitter" handle="UnderTheBreach" handlename="Alon Gal (Under the Breach)" image="http://pbs.twimg.com/profile_images/1364107350748053512/VFKQXcPJ_normal.jpg" favoritecount="234" retweetcount="127" status="Infamous threat actor &quot;ShinyHunters&quot; just leaked the database of &quot;BigBasket, a famous Indian 🇮🇳 online grocery deli… https://t.co/nS3RNKU7Gm" createdat="1619350289000" id="1386281705477189633"></div> Unfortunately, Big Basket was not the only Indian startup that reported data <a href="https://www.businessinsider.in/business/startups/news/from-whitehat-jr-big-basket-and-unacademy-to-dunzo-these-are-the-indian-startups-that-reported-data-leaks-over-the-past-few-months/slidelist/79467618.cms">breaches or bugs in their security system, last year</a>. WhiteHat Jr and Dunzo were also among the startups that saw their data getting compromised over the same period. The news comes weeks after Tata Group shared its plan to acquire <keyword id="964794" type="COMPANY" weightage="20" keywordseo="BigBasket">BigBasket</keyword>, valuing the Indian startup at over $1.8 billion. Big Basket has not released any official statement on the leak. We'll be updating the story if and when we hear from the management. When did the Big Basket breach happen? According to <a href="https://cybleinc.com/2020/11/07/bigbasket-indias-leading-online-supermarket-shopping-allegedly-breached-personal-details-of-over-20-million-people-sold-in-darkweb/">Cyble</a>, which was the first to make the details of the potential breach public, the first breach occurred on October 14 and it found out about it on October 30, later disclosing it to Big Basket on November 1. Cyble also claimed that the data was put up for sale on the dark web for $40,000. <h2 style="line-height:1.38;margin-top:0pt;margin-bottom:0pt;"> </h2>How to check if your data is compromised? <div type="image" title="Pawned ." msid="82256000" hostid="261" caption="&amp;lt;p&amp;gt;My data has been compromised.&amp;lt;/p&amp;gt;"></div> There are some portals like '<a href="https://haveibeenpwned.com/">have I been pwned</a>' and '<a href="https://www.amibreached.com/">am I breached</a>', where you can check your data has been compromised in one of the breaches in the past. You simply need to go to these sites, enter your email used to register the account and hit enter. In the former’s case, you will be informed about the number of breaches. Scrolling down, you will be able to see the platforms that were hit by a breach, compromising your data. I checked mine, and unfortunately, my data has been compromised in 11 breaches (image above) including Big Basket, Zomato, Dunzo, Zoomcar and more.

Big Basket data breach: email IDs, phone numbers, home addresses of two crore Indians allegedly leaked on the web

<keyword id="12161" type="LOCATION" weightage="20" keywordseo="San-Francisco">San Francisco</keyword>, May 23 (IANS) <keyword id="458689" type="PERSON" weightage="20" keywordseo="personal-data">Personal data</keyword> from nearly 40 million users of popular voting app Wishbone has been hacked which is available for free download on a hacking forum. The Wishbone user database has been leaked in full, according to a <keyword id="9281083" type="UNKNOWN" weightage="20" keywordseo="zdnet-report">ZDNet report</keyword>, and a hacker known as ShinyHunters has taken credit for the hacking. Earlier, the data was being offered for 0.85 bitcoin ($8,000) on the Dark Web. The data contains usernames, emails, phone numbers, city/state/country and <keyword id="7331691" type="UNKNOWN" weightage="20" keywordseo="hashed-passwords">hashed passwords</keyword>. "The data also included links to Wishbone profile pictures. URLs included in the sample data loaded images depicting minors, an age category the Wishbone app has always been historically popular," according to the report. The passwords were not stored in plain text but hashed using the <keyword id="9281084" type="UNKNOWN" weightage="20" keywordseo="md5-algorithm">MD5 algorithm</keyword>. MD 5 was declared "cryptographically broken" by the experts in 2010. A moderately-complex password hashed with MD5 could be cracked in 30 minutes or less. ShinyHunters is currently selling databases from tens of other companies, totaling more than 1.5 billion records. The companies include online dating app Zoosk, US newspaper Star Tribune and food delivery service Chef that contains over 73 million user records over the Dark Web for $18,000 (nearly Rs 13.6 lakh) . Other companies are printing service Chatbooks, South Korean fashion platform SocialShare, online marketplace Minted, online newspaper Chronicle of Higher Education, South Korean furniture magazine GGuMim, health magazine Mindful and Indonesia online store Bhinneka. ShinyHunters is the same group behind breaching private repositories on Microsoft-owned <keyword id="1505863" type="COMPANY" weightage="20" keywordseo="GitHub">GitHub</keyword> (the hacker is believed to have acquired around 1,200 private repositories) and Tokopedia, Indonesia's largest online store where a database of over 90 million user records was sold. On May 20, our team became aware of a security issue where we believe an unauthorized individual may have had access to Wishbone’s database through stolen credentials. Personal information for some of our users was compromised. No financial or other sensitive information was involved. We have since invalidated any current access methods to user information and updated keys accordingly, and we've also ensured that all employees or services which require access use cybersecurity approved multi-factor authentication or similar methods. Across the board, we are implementing stronger security and encryption of personal information to ensure the safety of all of our users’ data. We value our users' privacy and deeply regret that this has happened.

Personal data of 40 million Wishbone app users hacked

At least 235 million users of Facebook-owned Instagram, China-based TikTok and Google-owned YouTube have been hit by a massive <keyword id="6360618" type="UNKNOWN" weightage="20" keywordseo="data-leak">data leak</keyword> and their personal profiles were up for grabs on the Dark Web. According to security researchers from pro-consumer website Comparitech, an <keyword id="9797120" type="UNKNOWN" weightage="20" keywordseo="unsecured-database">unsecured database</keyword> was behind this data breach. "The data was spread across several datasets and the most significant being two coming in at just under 100 million each and containing profile records apparently scraped from Instagram," reports Forbes, quoting the security researchers. The third-largest was a dataset of some 42 million TikTok users, followed by nearly 4 million YouTube user profiles. One in five records contained either a telephone number or email address of the users, along with profile name, full real name, profile photo, account description and number of followers and likes, etc. "The information would probably be most valuable to spammers and cybercriminals running phishing campaigns," said Paul Bischoff, Editor at Comparitech. "Even though the data is publicly accessible, the fact that it was leaked in aggregate as a well-structured database makes it much more valuable than each profile would be in isolation," Bischoff said in the report on Thursday. According to the researchers, the leaked data points to a company called Deep Social banned by both Facebook and Instagram in 2018 after scraping user profile data. "Scraping people's information from Instagram is a clear violation of our policies. We revoked Deep Social's access to our platform in June 2018 and sent a legal notice prohibiting any further data collection," a Facebook spokesperson was quoted as saying. According to Comparitech, data marketing company Social Data later shut the unsecured database after it was reported to them. "Social Data has denied any connection between itself and Deep Social," according to the Comparitech report. Earlier this month, a hacker group known as ShinyHunters flooded a hacker forum with 386 million user records stolen from 18 companies. According to BleepingComputer, ShinyHunters began uploading the databases to a forum where anyone can download them free of charge. Of the databases released since July 21, nine of them were already disclosed in some manner in the past. SEE ALSO: <a href="https://www.businessinsider.in/tech/apps/news/google-eyes-indias-sharechat-as-microsoft-goes-after-tiktok-in-the-us-heres-why-it-makes-sense/articleshow/77667345.cms">Google eyes India’s ShareChat as Microsoft goes after TikTok in the US — here’s why it makes sense</a> <a href="https://www.businessinsider.in/tech/apps/news/gmail-down-users-report-being-unable-to-send-emails-and-attach-files/articleshow/77648762.cms">Gmail is working again — Google fixes issue without explaining what went wrong</a> <a href="https://www.businessinsider.in/science/space/news/isro-chandrayaan-2-identifies-craters-that-may-have-water-after-mapping-4-million-square-kilometres-of-the-moon-in-its-first-year/slidelist/77667105.cms">ISRO’s Chandrayaan 2 identifies craters that may have water after mapping 4 million square kilometres of the Moon in its first year</a>

TikTok, Instagram and YouTube data leak exposes data of 235 million users

<ul><li><keyword id="3489555" type="PERSON" weightage="20" keywordseo="upstox">Upstox</keyword>, the second largest stock broker in India, has suffered a massive data breach.</li><li>This breach has exposed user data like Aadhaar, PAN, bank account numbers and more.</li><li>While Upstox did not comment on the data leak, it said it has upgraded its security systems ‘manifold’ on the recommendations of a global cyber-security firm.</li></ul> Popular discount broker Upstox has suffered a massive data breach that has exposed some important data like Aadhaar, PAN and bank account numbers, apart from other personally identifiable information like mobile numbers and email addresses. Upstox is a Delhi-based discount stock broker that allows its customers to buy and sell shares. It is backed by Tiger Global and has over <a href="https://economictimes.indiatimes.com/markets/stocks/news/what-made-upstox-indias-second-largest-stockbroker-after-zerodha/articleshow/78745921.cms">1 million customers</a>. “We have upgraded our security systems manifold recently, on the recommendations of a global cyber-security firm. We brought in the expertise of this globally renowned firm after we received emails claiming unauthorised access into our database,” Upstox <a href="https://upstox.com/announcements/customer-support/security-measures/">said</a> on its website, reacting to reports of the data breach. The company said that despite the data breach, the funds and shares of its customers are safe. This is for two reasons – funds in your Upstox account can only be withdrawn to the linked bank account, and the shares are held with the depositories – either Central Depositories Services India Ltd (CDSL) or National Securities Depository Ltd (NSDL) – and not with Upstox. With that being said, Upstox users have other things to be worried about. Security researcher Rajshekhar Rajaharia, who <a href="https://www.businessinsider.in/tech/news/over-100-million-debit-and-credit-card-users-data-has-been-leaked-online-from-payments-processor-juspay-amazon-and-swiggy/articleshow/80096472.cms">had earlier tipped Business Insider about Juspay</a> and MobiKwik data breaches, told us that the <keyword id="11082460" type="UNKNOWN" weightage="20" keywordseo="Upstox-data-breach">Upstox data breach</keyword> includes Aadhaar, PAN, passport, bank account numbers, mobile numbers and even the photos of signatures. This data could be used by hackers or malicious parties to impersonate users and transact on their behalf without the users’ knowledge. According to Rajaharia, the Upstox data breach was executed due to a compromised Amazon Web Service (AWS) key used by the company. He says that the same AWS key vulnerability was exploited in the MobiKwik data breach as well. Rajaharia shared a data sample with us – the sample revealed user details as reported in the breach. However, we could not verify the authenticity of the sample. The hacking group, ShinyHunter, has taken down the data for now. Upstox is the latest in Indian companies being targeted by hackers The Upstox data breach is the latest in a string of Indian companies being hacked – the most recent ones were MobiKwik, Juspay, ClickIndia, ChqBook, WedMeGood, among others. However, this time around, the Upstox data breach could be a result of its own folly. SEE ALSO: <a href="https://www.businessinsider.in/tech/news/over-100-million-debit-and-credit-card-users-data-has-been-leaked-online-from-payments-processor-juspay-amazon-and-swiggy/articleshow/80096472.cms">The company that processes payments for Amazon and Swiggy has reported a data leak of over 100 million debit and credit cardholders</a> <a href="https://www.businessinsider.in/tech/news/these-were-the-biggest-cyber-attacks-of-2020/slidelist/79941232.cms">From FireEye to Twitter to Covid-19 vaccine research ⁠— these were the biggest cyber attacks of 2020</a>

You Searched For "shinyhunters" and got 7 results

Dating site MeetMindful hacked — data of over 2 million users leaked including Facebook details and geo-location

IANS

After Juspay, ClickIndia, ChqBook and WedMeGood have been reportedly hacked — data of over 10 million users up for sale on the dark web

IANS

Cryptocurrency startup BuyUcoin hacked, data of over 3 lakh users leaked

IANS

Big Basket data breach: email IDs, phone numbers, home addresses of two crore Indians allegedly leaked on the web

Sudhanshu Singh

Personal data of 40 million Wishbone app users hacked

IANS

TikTok, Instagram and YouTube data leak exposes data of 235 million users

IANS

Discount broker Upstox suffers data breach – Aadhaar, PAN and bank account numbers leaked

Rounak Jain

Popular Keywords

Buying Guides