India’s popular BHIM payments platform reportedly leaks 7M users’ data

guest · Jun 1, 2020

India’s popular BHIM payments platform reportedly leaks 7M users’ data
June 1, 2020
https://thenextweb.com/in/2020/06/0...ents-platform-reportedly-leaks-7m-users-data/

A data leak from India’s BHIM payment app exposed personal data of 7 million Indians including addresses, scans of Aadhar IDs, and caste certificates.

A report from cybersecurity company VPN Mentor suggests that this 409GB database was stored in a misconfigured AWS S3 bucket, making all data publicly accessible. The report noted that the database belonged to BHIM’s website, which is mainly used for onboarding users.
According to VPN Mentor, its research team discovered the unsecured database on April 23, and it notified India’s Computer Emergency Response Team (CERT-In) on April 28.

The database mostly contained onboarding documents to open a bank account such as scans of Aadhar IDs, caste certificates, proof of residence, Permanent Account Number (PAN) cards, and screenshots of fund transfers for proof.
Click to expand...

According to the app’s official account, people have made more than 1 billion transactions on average in each of the past three months.

With over a billion monthly transactions, UPI has been surging as the preferred mode of payment throughout the country. Use BHIM UPI and transform the way you transact. #DigitalIndia #InstantPayments #NPCI #BHIMUPI #PaySafe #StaySafe @dilipasbe pic.twitter.com/tZZLqC0VI8
— BHIM (@NPCI_BHIM) June 1, 2020
Click to expand...

vpnMentor: Report: Indian e-Payments App Exposes Millions of Users in Massive Data Breach

guest · Jun 2, 2020

NPCI denies breach of BHIM app data
June 1, 2020
https://www.thehindu.com/news/national/npci-denies-breach-of-bhim-app-data/article31726398.ece

Following a report by security researchers alleging leak of personal data of millions of users of government’s BHIM payment application due to a website breach, the National Payments Corporation of India (NPCI) on Monday denied the claim, asking “everyone to not fall prey to such speculations”.

“We have come across some news reports which suggest data breach at BHIM App. We would like to clarify that there has been no data compromise at BHIM App and request everyone to not fall prey to such speculations. NPCI follows high level of security and an integrated approach to protect its infrastructure and continue to provide a robust payments ecosystem,” NPCI said in a statement.
Click to expand...

Log in or Sign up

India’s popular BHIM payments platform reportedly leaks 7M users’ data

guest Guest

guest Guest

Log in or Sign up

India’s popular BHIM payments platform reportedly leaks 7M users’ data

guest Guest

guest Guest

Useful Searches