Massive Data Leak Of 375 Mn Airtel Users Reported, Telecom Giant Denies, Says ‘Attempt To Spoil Reputation’
In response to reports of a massive data breach affecting 375 million Indian users, Bharti Airtel has vehemently denied the allegations. The telecom giant dismissed the claims as a malicious attempt to smear its reputation, attributing the accusations to vested interests. The company said, “this is nothing short of a desperate attempt to tarnish Airtel’s reputation by vested interests.” Unverified reports suggested that sensitive details such as phone numbers, emails, addresses, Aadhaar numbers, and more were up for sale on the dark web. However, Airtel conducted a thorough investigation and asserted that no breach had occurred within its systems.
The alleged threat actor, ‘xenZen,’ purportedly offered to sell the Airtel user data on a platform known as BreachForums, setting the price at USD 50,000. The hacker also purportedly claimed to have successfully sold data from the Ministry of External Affairs’ diplomatic passport holders.
“There has been an ongoing report alleging that Airtel customer data has been compromised. We have done a thorough investigation and can confirm that there has been no breach whatsoever from Airtel systems,” an Airtel spokesperson told IANS on Friday.
According to the BeachForum post, the data contains following:
Mobile Numbers
Names
Dates of Birth
Father’s Names
Addresses
Email IDs
Gender and Nationality
Aadhar Numbers
Photo ID Proof Details
Address Proof Details
Data breach of Airtel
A threat actor, identified as ‘xenZen’ has listed the Airtel database for sale on BreachForums. The listing includes data from 375 million customers.
Details of the Data:
– Mobile number
– Name
– Date of birth
– Father’s name
– Address
– Email ID
-… pic.twitter.com/bGOxdgnDLO
— FalconFeeds.io (@FalconFeedsio) July 3, 2024
While the authenticity of the breach remains uncertain, experts like Nicolas Krassas, associated with Henkel AG in cybersecurity, have shared information about the incident. Despite the lack of clarity on whether hackers have accessed Airtel’s systems, the seriousness of the situation cannot be ignored.
Srinivas Kodali, who often comments on cyber security matters in India, was more blunt in his observations. He wrote on Twitter, “Airtel has been hacked by a China based threat actor. He listed 37.5 crore Airtel customer’s data including their Aadhaar numbers for sale. The actor who listed this data for sale on breach forums, is now suspended on the forum. India’s Data Protection Act is still not active.”
Airtel has been hacked by a China based threat actor. He listed 37.5 crore airtel customer’s data including their Aadhaar numbers for sale. The actor who listed this data for sale on breach forums, is now suspended on the forum. India’s Data Protection Act is still not active. pic.twitter.com/InevTn4w9l
— Srinivas Kodali (@digitaldutta) July 5, 2024
As of now, Airtel customers are advised to remain cautious and monitor any unusual activity related to their personal information. The telecom company continues to emphasise that its systems are secure and that it will take all necessary steps to protect its customers’ data.
