Explained: How big is the Bigbasket data breach?
In a statement, BigBasket said it was evaluating the extent of the breach and authenticity of the claim in consultation with cybersecurity experts and was finding “immediate ways to contain it”.
Cyble has claimed that personal information of as many as 20 million users such as full names, email IDs, password hashes, etc India’s top online grocer BigBasket has suffered a potential data breach resulting in personal information of over 20 million customers being allegedly sold on the dark web. This incident follows a series of data breaches that have impacted Indian companies.
When did the Bigbasket breach happen?
According to cybersecurity firm Cyble, which first made the details of the potential breach public, the alleged breach occurred on October 14. The firm said that it first detected the breach on October 30 and after validating the breach, it disclosed the breach to the Bigbasket management on November 1. The cybersecurity firm made the details of the breach public on November 7.
What BigBasket information has been leaked?
Cyble has claimed that personal information of as many as 20 million users such as full names, email IDs, password hashes (potentially hashed OTPs), pin, contact numbers (mobile and phone), full addresses, date of birth, location, and IP addresses of where users have logged in from have been put up for sale on the dark web for $40,000.
Share
