7 Million Indane LPG Users & Distributor’s Personal Data & Bank Details Leaked Online

guest · Apr 6, 2019

7 Million Indane LPG Users & Distributor’s Personal Data & Bank Details Leaked Online
April 6, 2019
https://gbhackers.com/7-million-indane-lpg-users-personal-data-leaked-online/

Indane LPG exposed nearly 7 Million Customers and distributors sensitive data online due to the serious vulnerabilities that discovered in all the major services that provide by their iOS applications.

Indane is owned by Indian Oil Corporation Limited, which is an Indian state-owned oil and gas company and it is the largest commercial oil company in India and it has a customer base of more than 98 million.
Leaked Distributor’s Bank details
In order to retrieve the requested information, a POST request is being sent to the following vulnerable API endpoint: [...]
In this case, “The response for this request displays my distributor’s information but it includes quite a lot of interesting details including the distributor’s bank details linked with Indane”.

Likewise, all the API endpoints are vulnerable that associated with Indane iOS app that allows virtually allowing me to do anything with any of the 6.7 million consumer’s including the following actions.
Click to expand...

March 29, 2019, Sreekanth Pillai, Reported to NCIIPC and March 30, 2019 — Indane’s official mobile applications were removed from both Apple and Google’s App Store.
Click to expand...

sg09 · Apr 7, 2019

Holy Crap! Our Family uses Indane LPG.

Log in or Sign up

7 Million Indane LPG Users & Distributor’s Personal Data & Bank Details Leaked Online

guest Guest

sg09 Registered Member

Log in or Sign up

7 Million Indane LPG Users & Distributor’s Personal Data & Bank Details Leaked Online

guest Guest

sg09 Registered Member

Useful Searches