BigBasket faces potential data breach; details of 20 mn users put on sale

Names, email IDs, password hashes, contact numbers, addresses of users put on sale on dark web, claims cyberintelligence firm Cyble

Online grocery platform BigBasket has become the latest target of cyberattack in India.

The company has faced a potential data breach with the information of over 20 million customers on the darkweb for sale, according to US-based cybersecurity intelligence firm Cyble.

The data, being sold for $40,000, includes the full names, email IDs, password hashes (potentially hashed OTPs), PIN, contact numbers, addresses, dates of birth, location, and IP addresses of login, among other bits of information, says a Cyble blogpost.

The Bengaluru-based start-up has lodged a complaint with the city’s cybercrime cell and is evaluating the extent of the breach