A massive database containing data of 750 million Indian mobile subscribers was offered for sale on dark web hacker forums earlier in January.
According to the CloudSEK researchers, at least two cybercrime gangs, CyboCrew affiliates known as CyboDevil and UNIT8200, were offering the database for $3,000.
The database is 1.8TB in size and contains details such as Indian mobile subscribers’ names, phone numbers, addresses, and Aadhaar details.
The cyber gangs claim to have obtained the data through undisclosed asset work within law enforcement channels rather than as a result of a leak from Indian telcos.
CloudSEK stated that its initial investigation found that the leak affects all major telecom providers. Given its size, the leak is estimated to affect 85% of the Indian population.
The leak of Personally Identifiable Information (PII) poses a huge risk to both individuals and organizations, potentially leading to financial losses, identity theft, reputational damage, and increased susceptibility to cyber-attacks.
CloudSEK has notified relevant authorities and potentially impacted organizations.
The leaked information could be used for identity theft, financial fraud, scams, and other types of malicious attacks.
Comments