25 lakh Airtel numbers with Aadhaar details leaked
Data of around 25 lakh Bharti Airtel subscribers of Jammu and Kashmir circle, including Aadhaar numbers, address and date of birth, has reportedly been leaked by hackers, even as the telecom operator denied any breach in its servers.
A sample of the leaked database was shared on Twitter by cybersecurity researcher Rajshekhar Rajaharia which shows masked details of the subscribers. He also shared a video of an e-mail exchange between Bharti Airtel and the hackers with the name of 'Red Rabbit Team'.
The video shows that the hackers informed Bharti Airtel about the breach in December and demanded money.
Another Big Data Breach? A Hacker Group alleged uploaded "shell" in @airtelindia Server. Now selling all India Airtel subscribers data including Aadhaar Number. Posted 2.5 Million as sample data. (in Jan 2021)#InfoSec #DataLeak #GDPR #databreaches #dataprotection #DataPrivacyDay pic.twitter.com/uxWopfKU0M
— Rajshekhar Rajaharia (@rajaharia) February 2, 2021
'Hackers have claimed that they have access to pan-India data of Airtel subscribers and they only uploaded a sample of subscribers data from Jammu and Kashmir.
'It may be possible that the hacker may have uploaded a shell (malicious software code) in Airtel servers. During the Covid-19 peak period several companies could not focus on security and their data was breached,' Rajaharia said.
Strange! @airtelindia already aware about this alleged breach since last 3 months. Hacker posted all email conversations with airtel too. They also posted POC video. What steps taken to remove and patch? I am also an Airtel Subscriber.🙁#InfoSec #DataLeak #GDPR #databreaches pic.twitter.com/Tdu9mMMIOW
— Rajshekhar Rajaharia (@rajaharia) February 2, 2021
The hackers also uploaded the subscriber data on a website, but it was not accessible later.
However, a Bharti Airtel spokesperson denied any breach of the company's servers.
'Airtel takes great pride in deploying various measures to safeguard the privacy of its customers. In this specific case, we confirm that there is no data breach at our end.
'In fact, the claims made by this group reveal glaring inaccuracies and a large proportion of the data records do not even belong to Airtel. We have already apprised the relevant authorities of the matter,' the spokesperson said.
ALSO READ:
MEA slams foreign celebs’ tweets; ‘sensationalist comments neither accurate nor responsible’
Iron nails, barbed wires turn farmer protest sites into fortresses