Indian online groceries unicorn Big Basket encountered a major data breach last month in October letting data of around 2 crore users put on sale on the dark web. The data included personal information of the users such as emails, password hashes, contact numbers, addresses and a lot more information. The company was unaware of the major data breach. Only when cyber intelligence firm Cybel informed BigBasket facing a potential data breach. Following this e-commerce platform has filed a police complaint with Cyber Crime Cell in Bengaluru.
As per a blog post by cyber intelligence firm, Cybel, Big Basket a leading online food and grocery store in India has been attacked by hackers therefore personal details of over two-crore BigBasket users have been listed on the dark web for sale. The e-commerce website has also filed a complaint with the Bengaluru Cyber Crime Cell.
BigBasket said in a statement said, “A few days ago, we learnt about a potential data breach at Big Basket and are evaluating the extent of the breach and authenticity of the claim in consultation with cybersecurity experts and finding immediate ways to contain it. We have also lodged a complaint with the Cyber Crime Cell in Bengaluru and intend to pursue this vigorously to bring the culprits to book.”
This leak was reported by cyber intelligence firm Cyble, “In the course of our routine Dark web monitoring, the Research team at Cyble found the database of Big Basket for sale in a cyber-crime market, being sold for over $40,000. The leak contains a database portion; with the table name ‘member_member’’ The alleged leak occurred on October 14 and the cyber intelligence firm detected the breach on October 30. The Cyble has already informed the management team of the leak and they are said to currently working towards a disclosure process.
The firm also confirmed that detail of users has been compromised which includes full names, email IDs, password hashes (potentially hashed OTPs), pin, contact numbers (mobile + phone), full addresses, date of birth, location, and IP addresses of login among many others.
In this regard, Big Basket says that the consumer data includes the user’s email IDs, phone numbers, order details, and addresses so these are the details that could potentially have been accessed. So, keeping the customer’s privacy and credit card numbers, etc confidential it does not store any financial data of the user. The E-commerce claims that all the important data is secured. Currently, Big Basket is providing services in various cities across the county including Bangalore, Hyderabad, Mumbai, Pune, Chennai, Delhi, Noida, Mysore, Coimbatore, Vijayawada-Guntur, Kolkata, Ahmedabad-Gandhinagar, Lucknow-Kanpur, Gurgaon, Vadodara, Visakhapatnam, Surat, Nagpur, Patna, Indore and Chandigarh Tricity city.
For the latest gadget and tech news, and gadget reviews, follow us on Twitter, Facebook and Instagram. For newest tech & gadget videos subscribe to our YouTube Channel. You can also stay up to date using the Gadget Bridge Android App.
