Udayavni Special

Data of 2 crore Bigbasket users put on sale on dark web


PTI, Nov 8, 2020, 12:08 PM IST

Image Source: BigBasket

New Delhi: Grocery e-commerce platform Bigbasket has faced a potential data breach which could have leaked details of its around two crore users, according to cyber intelligence firm Cyble.

The company has filed a police complaint in this regard with Cyber Crime Cell in Bengaluru and is verifying claims made by cyber experts.

Cyble said that a hacker has put data allegedly belonging to Bigbasket on sale for around Rs 30 lakh.

“In the course of our routine dark web monitoring, the research team at Cyble found the database of Big Basket for sale in a cybercrime market, being sold for over $40,000. The leak contains a database portion; with the table name ‘member_member’. The size of the SQL file is about 15 GB, containing close to 20 million user data,” Cyble said in its blog.

It added the data put on sale includes names, email IDs, password hashes, contact numbers (mobile and phone), addresses, date of birth, location, and IP addresses of login among many others.

While Cyble has mentioned “passwords”, the company uses a one-time password sent through SMS which keeps on changing every time a user logs in.

“A few days ago, we learnt about a potential data breach at Bigbasket and are evaluating the extent of the breach and authenticity of the claim in consultation with cybersecurity experts and finding immediate ways to contain it. We have also lodged a complaint with the Cyber Crime Cell in Bengaluru and intend to pursue this vigorously to bring the culprits to book,” Bigbasket said in a statement.

The company said that the privacy and confidentiality of customers is the priority and it does not store any financial data including credit card numbers etc and is confident that this financial data is secure.

“The only customer data that we maintain are email IDs, phone numbers, order details, and addresses so these are the details that could potentially have been accessed. We have a robust information security framework that employs best-in-class resources and technologies to manage our information. We will continue to proactively engage with best-in-class information security experts to strengthen this further,” Bigbasket said.

The Bengaluru-based company is funded by Alibaba Group, Mirae Asset-Naver Asia Growth Fund, and the UK government-owned CDC group.

Cyble claimed that the breach occurred on October 30, 2020 and it has already informed the management of Bigbasket about it.

The cyber intelligence firm said on October 31, Cyble validated the breach through “validation of the leaked data with BigBasket users/information”, and on November 1, “Cyble disclosed the breach to Bigbasket management.”

Udayavani is now on Telegram. Click here to join our channel and stay updated with the latest news.

Top News

PM hailing farm laws shows govt ‘drunk with power’, ‘rigid’ in face of protests: Cong

UP registers first case under anti-conversion law in Bareilly

Modi’s Hyd visit: A testimony of Telangana achievement, KCR should have been invited, says KTR

Cong MP Karti flays hero worship of Rajiv case convicts

Graffiti in support of terror groups: UTK demands immediate arrest of culprits

New farm laws have begun mitigating farmers’ problems in short span of time: PM

Barack Obama approves Drake to play him in a potential biopic



Related Articles More

RBI likely to maintain status quo for 3rd straight time on inflation concerns

Cos raise Rs 25,000 cr via IPOs in 2020 so far; next year expected to be equally strong

Sebi bars NDTV promoters, others in insider trading case; company to appeal

Petrol price crosses Rs 82-mark, diesel above Rs 72 a litre

Irdai gives in-principle approval for Bharti AXA-ICICI Lombard deal

MUST WATCH

Meet the man with the largest collections of Newspapers | Umesh Rao Ekkar Mangalore

Mangalore: Woman rescues a cat from 30 feet deep well | Ranjini Shetty | Udayavani

CM and central leadership will take final call on Cabinet expansion: Ashwath Narayan

Assorted flowers, fruits, and vegetables are grown in the terrace garden

Celebrating 25 Years of Laveena Masala | Since 1996 | Udayavani

Latest Additions

Pope, with new cardinals, warns church against mediocrity

‘Aashiqui’ Actor Rahul Roy Hospitalised Following Brain Stroke, is Safe and Recovering Well

Who is Masetti, engineer praised by PM Modi for teaching Vedanta in Brazil?

Check love affairs of leader’s children before passing law against Love Jihad: DKShi in Udupi

PM hailing farm laws shows govt ‘drunk with power’, ‘rigid’ in face of protests: Cong

Thanks for visiting Udayavani

You seem to have an Ad Blocker on.
To continue reading, please turn it off or whitelist Udayavani.