40,000+ Indian online marketplace suppliers’ data leaked

guest · Jun 25, 2020

IndiaMART data breach: 40,000 company records discovered on cybercrime forums
Researchers say sensitive information is for sale on two separate underground marketplaces
June 25, 2020
https://portswigger.net/daily-swig/...-records-discovered-on-nbsp-cybercrime-forums

A breach at online marketplace IndiaMART has leaked the sensitive data of more than 40,000 suppliers.

IndiaMART is a business-to-business e-commerce site, connecting suppliers from across India. Last year, the official app had 10 million downloads.
Researcher Ashok Krishna from threat monitoring platform CloudSEK discovered that data belonging to thousands of suppliers was being sold on online forums.

Each record was said to consist of sensitive information including suppliers’ user IDs, full names, addresses, email addresses, and phone numbers.
Click to expand...

Deepanjli Paulraj, lead cyber intelligence editor at CloudSEK, told The Daily Swig: “We have been able to validate the data. It does belong to active IndiaMART vendors.

“We reached out to IndiaMART and CERT India a couple of days ago. CERT India has asked for more details, but IndiaMART has not responded.”
The second set of data contains 43,920 records, the person posting it claims, however the researchers were not able to verify this data.
Click to expand...

40,000+ Indian online marketplace suppliers’ data leaked

Impact

Threat actors can use the PII in the data dump to orchestrate phishing campaigns, online and offline scams, and even identity theft.

Since the source of the leak is not known, there is a possibility that threat actors can continue to exploit it. Whether a bug in the IndiaMART website or an unsecured database, if not remediated, could put 6 million+ suppliers on the platform at risk.

Usually our mobile numbers and email IDs are linked to banking, mobile wallet, and other online accounts. Having these details makes it easier for threat actors to compromise the victims’ accounts.

Click to expand...

Log in or Sign up

40,000+ Indian online marketplace suppliers’ data leaked

guest Guest

Log in or Sign up

40,000+ Indian online marketplace suppliers’ data leaked

guest Guest

Useful Searches