Hacker claims to have accessed Airtel’s customer database; company denies data breach 

A hacker claiming to have accessed Airtel’s customer database announced that it is on sale for $50,000

Updated - July 05, 2024 06:14 pm IST

Published - July 05, 2024 04:09 pm IST

A hacker claimed to have access to Airtel India customers database comprising details of 37.5 crore users.

A hacker claimed to have access to Airtel India customers database comprising details of 37.5 crore users. | Photo Credit: Reuters

A hacker claimed to have access to Airtel India customers database comprising details of 37.5 crore users. The database allegedly contains customers’ mobile numbers, date of birth, father’s name Aadhaar ID, email ID and more.

The hacker reportedly announced they were putting up the database for sale on a hacking forum at a going rate of $50,000 USD (Rs 41 lakh) to be paid in cryptocurrency.

The hacker who goes by the alias “xenZen“ further shared that the breach took place in June 2024 and reportedly shared a data sample.

Airtel, however, has denied the claims saying, “This is nothing short of a desperate attempt to tarnish Airtel’s reputation by vested interests”. The telecom operator further said it has conducted a thorough investigation and can confirm that there are no breaches in its systems.

(For top technology news of the day, subscribe to our tech newsletter Today’s Cache)

This is not the first time the hacker has claimed to have access to sensitive information of Indian citizens. Earlier, the same hacker was alleged to have been involved in a data breach targeting the diplomatic passport holder’s database maintained by the Union Ministry of External Affairs.

Earlier in 2021, a cybersecurity researcher had flagged that the details of over 2.5 million Airtel subscribers had been uploaded on a website of a threat actor, which was taken down only after three months. Airtel denied that any breach had occurred.

A breach in the database of customer’s personal information can have a far-reaching impact as threat actors can use personally identifiable information (PII) to launch a number of phishing attacks, perform identity theft and compromise financial security of individuals.

0 / 0
Sign in to unlock member-only benefits!
  • Access 10 free stories every month
  • Save stories to read later
  • Access to comment on every story
  • Sign-up/manage your newsletter subscriptions with a single click
  • Get notified by email for early access to discounts & offers on our products
Sign in

Comments

Comments have to be in English, and in full sentences. They cannot be abusive or personal. Please abide by our community guidelines for posting your comments.

We have migrated to a new commenting platform. If you are already a registered user of The Hindu and logged in, you may continue to engage with our articles. If you do not have an account please register and login to post comments. Users can access their older comments by logging into their accounts on Vuukle.