In pics: From Domino’s to Air India; A look at the biggest data breaches in last 12 months

SUMMARY

The leak of personal details of Domino’s India customers is the latest in the series of recent massive cyber-attacks on large Indian companies.

By CNBCTV18.comMay 24, 2021 4:56:03 PM IST (Updated)

In yet another massive data breach the details of 18 crore orders of popular pizza delivery chain Domino’s India have been made publicly available on the dark web. The details included the name, e-mail, phone number and GPS locations of the customers who had ordered pizza through Domino’s App. The leak of personal details of Domino’s India customers is the latest in the series of recent massive cyber-attacks on large Indian companies. Last week details of 45 lakh customers of Air India were leaked. Online grocery and vegetable delivery platform Big Basket also faced a massive cyberattack in November last year in which details of 2 crore customers were leaked. Here is a look at the biggest data breaches in the last 12 months..

Domino's Pizza: Domino's Pizza suffered a data leak recently that saw details of 18 crore users being posted online for sale on the dark web. Details include phone numbers, GPS locations, name and email address. Credit Card details of around 10 lakh customers also allegedly compromised, according to cyber-security experts.

Air India: In one of the biggest data breaches, Air India saw the details of 45 lakh users get leaked after a sophisticated attack on its Switzerland based SITA passenger service system in February. This personal data included the name, date of birth, passport information and credit card details of Air India passengers worldwide. The data included the details of the customers who had registered between August 26, 2011, and February 20, 2021.

Big Basket: In November last year, online grocery delivery platform Big Basket's users got a rude shock when the personal information including phone numbers and address of more than 2 crore customers got leaded on a cyber-crime forum for $40,000.

Digital Ocean: Cloud infrastructure provider Digital Ocean said that the details of 1 percent of its billing accounts were exposed after unauthorized access to its systems in April this year. Details that got leaked included names, addresses, partial credit card details.

Reverb: Online music marketplace Reverb experienced a security breach that resulted in the personal data of its 56 lakh users exposed on the dark web. Names, addresses, phone numbers and email IDs were leaked. (Representational image)

Upstox: Brokerage firm Upstox alerted users of a possibility of compromise of users' contact and KYC data. The company said it has received emails claiming unauthorized access into the database and compromise of some contact data and KYC details from third-party data-warehouse systems.

Cam4: In March 2020, adult video streaming website CAM4 had over 10 billion of its records compromised after its server was breached. The data that was leaked was highly sensitive in nature with details ranging from customer ids, email addresses, password hashes and even the sexual orientation of customers being exposed. (Representative image: Stock image/ Caption: Story Tailors)

MGM Grand: In February 2020, hospitality giant MGM Grand fell prey to hackers who got their hands on over 10 million guest records. The breach created a furore given that details of big names such as singer-songwriter Justin Bieber, Twitter CEO Jack Dorsey, and certain government officials were exposed. The organization maintained that the hackers had not managed to get their hands on any financial information. (Representative image: Stock image/ Caption: Story Tailors)

BlueKai: Security researcher Anurag Sen traced an unsecured BlueKai database accessible on the open internet in June 2020, leading to the discovery of one of the largest data breaches in recent history. The cloud-based big data platform startup, which was bought over by Oracle in 2019, stored billions of records containing names, home addresses, email addresses, and web browsing activity in its compromised database. (Representative image: Stock image/ Caption: Story Tailors)

Advanced Info Service (AIS) : Thailand-based mobile network operator, Advanced Info Service (AIS) suffered a major breach of data in May, 2020. Following a tip from security researcher Justin Paine, AIS confirmed the data leak. The company acknowledged that their “procedures fell short”, thereby compromising over 8,336, 189, 132 records stored in the database. (Representative image: Stock image/ Caption: Story Tailors)

Keepnet Labs: A U.K.-based security company, Keepnet Labs confessed to a data breach of nearly 5 billion records. While the breach did not reveal company data and customer records, it involved previously reported data breaches collections. In a public statement, they said that a new engineer who was performing scheduled maintenance had to disable the firewall for approximately 10 minutes to speed up the process. “During this window, the Internet indexing service, BinaryEdge indexed this data,” the company said in a statement. (Representative image: Stock image/ Caption: Story Tailors)

Estée Lauder: In January 2020, cosmetics giant Estee Lauder reported a breach of 440,336,852 records. The company said that the database was from an “education platform,” and did not contain consumer data. The records contained user emails, internal documents, IP addresses among other details. (Representative image: AP/ Caption: Story Tailors)

Weibo: In March 2020, a hacker claimed to have breached the Chinese social network Weibo in mid-2019. He claimed that he had obtained details of 538 million users, which was up for sale for $250 on the dark web. The records allegedly contained sensitive information such as names, phone numbers, usernames, gender, geolocation of customers. (Representative image: Reuters/ Caption: Story Tailors)

Whisper: Social media platform Whisper, which describes itself as the “safest place on the Internet,” was subjected to hacking in March 2020. Given the nature of the app, the data breach exposed several intimate confessions, sexual confessions and discussion of sexual orientation and desires, anonymous “whispers”, ages, locations and other details spread over 900 million Whisper posts. (Representative image: Reuters/ Caption: Story Tailors)

Broadvoice: Broadvoice, a Voice over IP (VoIP) telecommunications vendor, suffered a breach of nearly 350 million records thanks to an exposed cluster. The breach was discovered in October 2020 and included caller details names, phone numbers, and locations. According to reports, one of the compromised databases included transcriptions of hundreds of thousands of voicemails. This led to the exposure of sensitive information such as details about the medical and financial data of the customers.

Jetstar: Australian low-cost airline Jetstar’s database was hacked in May 2020 causing data of 9 million customers to be compromised. The data breached included information ranging from the name and travel plans to the credit card details of nearly 2,208 customers.