From WhiteHat Jr, Big Basket, and Unacademy to Dunzo — these are the Indian startups that reported data leaks over the past few months

<ul><li>According to cyber intelligence firm <keyword id="9086224" type="PERSON" weightage="20" keywordseo="cyble">Cyble</keyword>, the database of nearly 22 million learners on the edtech platform <keyword id="6630114" type="UNKNOWN" weightage="20" keywordseo="unacademy">Unacademy</keyword> was compromised in January 2020 and went up for sale on Dark Web a few days ago. </li><li>That includes professionals from Wipro, Infosys, Cognizant, Google and Facebook. </li><li>Unacademy confirmed Business Insider that database of 11 million learners was hacked — but no sensitive information was compromised. </li><li>The company is now conducting an aggressive background check for any loopholes or <keyword id="6355300" type="UNKNOWN" weightage="20" keywordseo="security">security</keyword> threats. </li></ul>The database of nearly 22 million learners on the edtech platform Unacademy was compromised in January 2020 and went up for sale on Dark Web a few days ago. That includes professionals from Wipro, Infosys, Cognizant, Google and Facebook. <a href="https://economictimes.indiatimes.com/small-biz/startups/newsbuzz/unacademy-database-of-22-million-users-hacked-up-for-sale/articleshow/75594089.cms">According to a cybersecurity intelligence firm</a> Cyble, these contacts were put up on sale for $2,000 on May 3. This includes account details such as username, email address, password, profile, and login location and timings. While the startup confirmed Business Insider that the data breach happened, it said that no sensitive information was compromised. The database of 11 million learners was compromised. "As per our internal investigations, email data of around 11 million users has been compromised as against 22 million stated in reports. This is on account of only around 11 million email data of users available on the Unacademy platform," the company said. "We have been closely monitoring the situation and would like to assure our users that no sensitive information such as financial data or location has been breached. Data security and privacy protection of our users is of utmost importance to us and we are doing everything possible, to ensure no personal information is compromised," said <keyword id="2926733" type="PERSON" weightage="20" keywordseo="Hemesh-Singh">Hemesh Singh</keyword>, Co- Founder and CTO, Unacademy. The company is now conducting an aggressive background check for any loopholes or security threats. We follow stringent encryption methods using the PBKDF2 algorithm with a SHA256 hash, making it highly implausible for anyone to decrypt passwords. We also follow an OTP based login system that provides an additional layer of security to our users," Singh elaborated. However, as per the cyber intelligence firm, the intruders have only leaked user account information as of now and the hackers might have more information with regard to these user accounts, adding that the registered learners should change their passwords immediately. The edtech startup has a user base of 10,000 educators and over 13 million learners. Cyble, which also reported the data breach involving teleconferencing platform Zoom, claims that the database has details of 21,909,709 <keyword id="9181097" type="UNKNOWN" weightage="20" keywordseo="unacademy-users">Unacademy users</keyword>. See also: <a href="https://www.businessinsider.in/tech/news/sudhir-krishnaswamy-on-facebook-oversight-board-which-will-control-controversial-content-on-facebook-and-instagram/articleshow/75593282.cms">Meet the Indian on Facebook's oversight board which will police content on Facebook and Instagram</a>

11 million Unacademy user accounts were hacked in January — and they are now up for sale on Dark Web

New Delhi, May 7 () Facebook-funded education technology firm Unacademy's data comprising over 20 million accounts has been hacked by cybercriminals and put up for sale in the dark web, according to cybersecurity firm Cyble. The hackers have claimed that they have access to the complete database of Unacademy and decided to leak only users' accounts at this point of time, Cyble said. The cyber intelligence firm added that further leaks are expected in the near future. "On May 3, 2020, Cyble Inc discovered that a threat actor had begun to sell an Unacademy user database containing 20 million accounts for USD 2,000. Unacademy is India's largest online learning platform. This data breach apparently took place in January 2020," Cyble claimed. When contacted, Unacademy co-founder and Chief Technology Officer Hemesh Singh said the company has been closely monitoring the situation and claimed that no sensitive information such as financial data or location has been breached. "As per our internal investigations, e-mail data of around 11 million users has been compromised as against 22 million stated in reports. This is on account of only around 11 million e-mail data of users available on the Unacademy platform," Singh said. He said the company is following stringent encryption methods and making it highly implausible for anyone to decrypt passwords. "We also follow an OTP-based login system that provides an additional layer of security to our users. We are doing a complete background check and will be addressing any potential security loophole to further bolster our efforts of ensuring a far more robust security mechanism. We are in communication with our users to keep them updated on the progress," Singh said. Facebook, General Atlantic, Sequoia India, Flipkart CEO Kalyan Krishnamurthy, and Nexus Venture Partners have invested in the company. According to Cyble, this breach can have an impact on security of other companies as well. "Cybercriminals are always on the lookout for such breaches and utilise them for credential stuffing attacks. We have seen accounts/records with domain names from Infosys, TCS, Cognizant, Reliance Industries, HDFC, Accenture, ICICI, SBI, Canara Bank, Bank of Baroda, Punjab National Bank and several other large organisations," Cyble said. PRS HRS

Facebook-funded Unacademy data hacked, claims cybersecurity firm

<ul><li>The <keyword id="158137" type="COMPANY" weightage="20" keywordseo="Domino">Domino</keyword>’s India data breach allegedly includes data of 1 million credit cards and 180 million orders. </li><li>According to security researchers, the reseller is demanding 10 Bitcoin – approximately $5,70,000 – for the 13TB database. </li><li>The database contains mobile numbers, name, home address and more. </li></ul>Domino’s India, the popular American multinational pizza restaurant chain, is allegedly the latest victim of a data breach. The Domino’s data breach has exposed 1 million credit card details along with 180 million order details. According to <a href="https://twitter.com/UnderTheBreach/status/1383673094963822597">Alon Gal</a>, security researcher and Chief Technology Officer of cybersecurity firm Hudson Rock, the reseller is demanding 10 Bitcoin, which is approximately $570,000 for the complete database, which is 13TB in size. <div type="twitter" handle="UnderTheBreach" handlename="Alon Gal (Under the Breach)" image="http://pbs.twimg.com/profile_images/1364107350748053512/VFKQXcPJ_normal.jpg" favoritecount="271" retweetcount="154" status="Threat actor claiming to have hacked Domino's India (@dominos) and stealing 13TB worth of data.Information includ… https://t.co/ayn9de8hgf" createdat="1618728347000" id="1383673094963822597"></div> Additionally, Gal also says that the hacker has plans to build a search portal similar to the MobiKwik one, allowing anyone to enter a search string to confirm the existence of those details. The database includes details like mobile numbers, names, home addresses, payment type and social login tokens. Rajashekhar Rajaharia, another security researcher, also <a href="https://twitter.com/rajaharia/status/1384079086927052801">confirmed</a> the breach, along with a data tree that reveals all the details that have been accessed by the hackers. Apart from the data of Domino’s India’s users and orders, the hacker also got access to data of 250 employees of the company across different departments like IT, Legal, Finance among others. Rajaharia has confirmed to Business Insider that this is the same hacker who breached MobiKwik earlier last month. He says that the hacker sold the database to a reseller who has now posted the details on the dark web. Domino’s India data breach exacerbates security concerns plaguing Indian companies Domino’s India won’t be the last Indian company to be hacked, but it highlights the endless stream of Indian companies facing security concerns. Earlier last month, MobiKwik was reportedly hacked, exposing data of 3.5 million users. While the company <a href="https://www.businessinsider.in/business/startups/news/mobikwik-ceo-orders-a-forensic-audit-after-denying-any-data-leak-from-its-digital-wallet/articleshow/81759461.cms">denied it</a>, it ordered a forensic audit post-fact. Prior to it, Juspay, BigBasket, Unacademy and others were also breached. India’s unicorn startups, <a href="https://www.businessinsider.in/defense/news/the-chinese-cyber-threat-is-real-and-indias-best-defence-right-now-is-to-keep-its-outage-time-limited/articleshow/81981886.cms">power sector</a> and others like Jio are amongst the prime targets for Chinese hackers. SEE ALSO: <a href="https://www.businessinsider.in/tech/news/over-100-million-debit-and-credit-card-users-data-has-been-leaked-online-from-payments-processor-juspay-amazon-and-swiggy/articleshow/80096472.cms">The company that processes payments for Amazon and Swiggy has reported a data leak of over 100 million debit and credit cardholders</a> <a href="https://www.businessinsider.in/defense/news/the-chinese-cyber-threat-is-real-and-indias-best-defence-right-now-is-to-keep-its-outage-time-limited/articleshow/81981886.cms">The Chinese cyber threat is real — and India’s best defence right now is to keep its outage time limited</a> <a href="https://www.businessinsider.in/tech/news/after-jio-swiggy-paytm-ola-and-byjus-and-other-startups-on-target-of-chinese-hackers/articleshow/77497819.cms">After Jio, India's unicorn startups are the top target for Chinese hackers trying to get their hands on Indian users' data</a>

You Searched For "unacademy data breach" and got 4 results

From WhiteHat Jr, Big Basket, and Unacademy to Dunzo — these are the Indian startups that reported data leaks over the past few months

Sanchita Dash

11 million Unacademy user accounts were hacked in January — and they are now up for sale on Dark Web

Prerna Sindwani

Facebook-funded Unacademy data hacked, claims cybersecurity firm

PTI

Domino’s India data breach allegedly exposes 1 million credit card details, 180 million order details

Rounak Jain