Data Leak

Star Health breach: Beware, your Aadhaar, PAN, password leak risk fraud

The Star Health Insurance breach is just one in a series of recent data breaches affecting millions of people in India

Cloudflare denies hosting sites linked to data leak at India's Star Health

Star also sued Telegram and hacker xenZen, after it was reported that sensitive personal data, from numbers to copies of identity cards and blood reports of customers, were publicly accessible

Data of 7.5 mn boAt customers leaked on dark web: Forbes India report

The personal data of 7.5 million boAt customers is a being sold at just two euros on the dark web

Over 95 GB of Indian immigration data stolen by China-linked hacking group

Files leaked on GitHub include data not only from India but from at least 80 overseas targets, including Vietnam, Thailand and Taiwan

Cybersecurity co claims data leak of telecom users, DoT demands audit

The Department of Telecom has asked service operators for a security audit of their systems following claims by a cybersecurity firm that data of 750 million Indian subscribers has been leaked, a government official said. Cybersecurity firm CloudSEK has claimed that its researchers have found that hackers are selling 1.8 terabyte of database comprising 750 million Indian mobile consumers on the dark web. The hacker has denied any involvement in a breach and has claimed to have obtained the data through undisclosed asset work within law enforcement channels, CloudSEK said. "The DoT has asked telecom operators to get a security audit of their systems," a senior government official said. The officer, however, said that telecom operators have informally shared with the department that the leaked information claimed in the ClouSEK report seems to be a compilation of old data sets of telecom subscribers and it is not due to any vulnerability in their system. CloudSEK in its report last

There was no bulk data download: Govt on alleged CoWIN breach

Investigations into the reported data breach on the CoWIN portal have ascertained that there was no bulk data download from its beneficiary database, Union Minister for State for Health S P Singh Baghel told the Lok Sabha on Friday. The CoWIN portal of the Union health ministry already has adequate security measures and safeguards for data privacy with Web Application Firewall (WAF), Anti-DDoS and SSL/TLS (regular vulnerability assessment) identity and access management, the minister said in a written reply in the Lower House. The CoWIN portal is the repository of all data of people who have been vaccinated against COVID-19. "There were media reports of apparent breach of CoWIN data of beneficiaries who have received Covid vaccination in the country. The matter was investigated and analysed by CERT-In under the Ministry of Electronics and Information Technology and it was ascertained that there was no bulk data download from Co-WIN beneficiary database," Baghel said. In view of med

Data protection Bill tabled, penalties of up to Rs 250 crore for leaks

Digital platforms will need to take unconditional and informed consent from users for processing their data

Sensitive US military emails reach Russian ally due to 'typo leak'

Millions of US military emails were mistakenly sent to Mali; the leak has exposed highly sensitive information, including diplomatic documents, tax returns, travel details of top officers

Two, including a juvenile, held over involvement in CoWIN data 'leak'

A man was arrested and a juvenile were apprehended from Bihar in connection with their involvement in the alleged data leak from CoWIN portal, officials said on Thursday. The man is alleged to have used a Telegram app to leak the data, they said. There have been claims about a breach of data of citizens registered on the CoWIN platform, and opposition parties have asked the government to take deterrent action. The government has termed such reports "mischievous" and "without any basis" while asserting that the CoWIN portal is completely safe with adequate safeguards for data privacy. The matter was sent for a review by the country's nodal cyber security agency CERT-In, which said in its initial report, that the backend database for the Telegram bot, which is at the centre of the alleged leak, was not directly accessing the APIs of the CoWIN database. In a statement, the Union Health Ministry also said that an internal exercise has been initiated to review the existing security ...

CoWin portal data leak feeds risk of scams and extortion calls: Experts

Information like government ID numbers such as Aadhaar, passports, or PAN numbers become persuasive records, as they cannot be changed or erased for a particular individual

CoWin data leak on Telegram channel alleged; Centre says portal 'safe'

Govt terms breach reports on Telegram 'mischievous'

Shocking news | CoWIN data leaked | Aadhaar details out

Data breach: Personal data of Covid vaccine recipients leaked on Telegram

Crucial information like a person's phone number, gender, ID card information and date of birth can be received from a Telegram bot just by entering a person's name

Data leak: Around 2 mn vehicles in Japan were at risk in decade-long breach

A decade-long data breach in Toyota's much-touted online service put some information on more than 2 million vehicles at risk, the Japanese automaker said Friday. Spanning from January 2012 to April 2023, the problem with Toyota's cloud-based Connected service pertains only to vehicles in Japan, said spokesperson Hideaki Homma. The Connected service reminds owners to get maintenance checks and links to streaming entertainment and provides help during emergencies. It can call for help after a crash or locate a car that's been stolen. No issues arising from the breach have been reported so far. Although there is no evidence any information was leaked, copied or misused due to the breach, the data at risk includes: the vehicle identification number, which is separate from the license plate; the location of the vehicle and at what time it was there; and video footage taken by the vehicle, known as the drive recorder in Japan. Such information cannot be used to identify individual owne

Samsung bans employees from using AI after spotting ChatGPT data leak

The company conducted a survey last month about the use of AI tools internally and said that 65% of respondents believe that such services pose a security risk

US embarrassed after 21-year-old arrested in classified documents leak

As Pentagon jobs go, Teixeira's was pretty junior and his job description says workers like him "keep our communications systems up and running and play an integral role in our continuing success"

RailYatri penalised for data leak, app restored after security measures

The government penalised the RailYatri app custodian company for a data leak and the app was restored after taking necessary security measures, Parliament was informed on Wednesday. Minister of State for Electronics and IT Rajeev Chandrasekhar in a written reply to the Lok Sabha said that IRCTC took action on the RailYatri app following information shared by CERT-In in December 2022. "As per information furnished by the Indian Railway Catering and Tourism Corporation (IRCTC), upon receipt of information from CERT-In in December 2022 regarding leakage of data acquired and maintained by RailYatri app, the ticket-booking facility on RailYatri app was stopped, penalty was imposed on the company which is the custodian of the RailYatri app, and the app was restored after taking necessary security measures," he said. The minister said that a total of 10, 5 and 7 incidents of data leak related to government organisations were reported for the years 2020, 2021 and 2022 respectively. "As per

Washington county mistakenly releases nearly half million partial SSNs

A county in Washington inadvertently released nearly half a million partial Social Security Numbers when responding to a routine public records request in December, according to county officials. The Pierce County Auditor's Office, which mistakenly released the sensitive data, said in a news release that the human error was quickly spotted and that the person who received the SSN digits deleted them within two hours. The requester had not asked for the personal information. First let me say that I am incredibly sorry that this happened, Pierce County Auditor Linda Farmer said in statement. Farmer added that this was not a targeted hack, and that "we have taken steps to ensure it does not happen again. The Social Security number information was included in a routine request for publicly available voter registration data, which typically includes names, addresses and birth dates. Personally identifiable information, including Social Security number information, which can be used to ..

Twitter sued for data leak of 200 mn users that it denied was due to flaw

New York state resident Stephen Gerber claims his personal information was among the cache of data obtained by hackers between 2021 and 2022

Twitter security headaches mount with data leak of over 230 mn users

The database, which was posted on Wednesday, contains the names and email addresses of politicians, journalists and bankers, among others