Mobikwik Data Breach - Largest Data Breach according to Researchers

Founded in 2009, Mobikwik being one of the biggest market players in the field of digital wallet and payments is facing a lot of questioning because of the recent data breach claimed by independent security researchers. Firstly tweeted by an Indian security researcher named Rajshekhar Rajaharia about the leak that 11 crores Indian cardholder's card information including KYC details such as PAN, Aadhar, etc. are available for sale on the Darkweb. 

Rajshekhar Rajaharia shared some pictures of the data available online and tweeted that "Again!! 11 Crore Indian Cardholder's Cards Data Including personal details & KYC soft copy(PAN, Aadhar etc) allegedly leaked from a company's Server in India. 6 TB KYC Data and 350GB compressed mysql dump."

Again!! 11 Crore Indian Cardholder's Cards Data Including personal details & KYC soft copy(PAN, Aadhar etc) allegedly leaked from a company's Server in India. 6 TB KYC Data and 350GB compressed mysql dump.@RBI @IndianCERT #InfoSec #dataprotection #Finance pic.twitter.com/yjc7davH3k

— Rajshekhar Rajaharia (@rajaharia) February 26, 2021

But, the company with the help of Security Researchers went on to look up any data breach and denied the statement that their data is safe. This controversy again sparked when independent researchers claimed that the data of 3.5 million MobiKwik users is up for sale on the Dark Web. While the French Security researcher Alias Elliot Alderson(who Previously reported about the safety of Aadhar information of users) claimed on Monday about the alleged Data Breach of 8.2 TB which contains phone numbers, emails, hashed passwords, addresses, bank accounts, and card details. Some users have claimed that their accurate data has been available on the Dark Web, which can be accessed by the available link. However, MobiKwik denied the breach by saying "Some media-crazed so-called security researchers have repeatedly attempted to present concocted files wasting precious time of our organization as well as members of the media". Alderson tweeted about the severity of the Breach that "Probably the largest KYC data leak in history." 

Read the thread here:

The MobiKwik leak is real. Here is what the dump had for me. One of those credit cards was valid until a couple weeks ago, and I don't recall authorising MobiKwik to save it. Companies that lie like 👇 ought to be taken to the cleaners. https://t.co/sptyC1Jz8f pic.twitter.com/c4Uu25OviP

— Kiran Jonnalagadda (@jackerhack) March 29, 2021

Some Security researchers also tweeted the pictures of information available on the Dark Web. According to the independent security researchers, the dump is available online for 1.5 Bitcoin (around $85,000) on the Dark Web. 

We hope you liked the article.
Thanks for Reading!!