Domino’s India user data allegedly breached, up for sale on the dark web: Report

The popular pizza chain is reportedly the latest company to have been affected by a data breach, which allegedly includes customer data including phone numbers, names, and payment information.

The alleged breach was discovered by Alon Gal, the CTO of Hudson Rock, a cybersecurity firm. (Pixabay)

The past couple of months have seen a spate of data breaches at multiple online companies and services around the world, including a couple of Indian companies who were also reportedly affected. While some companies have attributed the leaks to scraping of publicly available data, others have denied they were compromised.

Domino's India appears to be the latest company to have been affected by a data breach, according to Gadgets360. The breach reportedly includes customer data including phone numbers, names, and payment information including credit cards, which was collected earlier this month, the report says.

The alleged breach was discovered by Alon Gal, the CTO of Hudson Rock, a cybersecurity firm. Gal tweeted about the breach on Sunday, claiming that the data was being sold for around ₹4.5 crore (10 Bitcoin). The data was reportedly gleaned from the company's internal files between 2015 and 2021, containing details about 18 crore orders and 10 lakh credit cards, according to the report.

Threat actor claiming to have hacked Domino's India (@dominos) and stealing 13TB worth of data.

Information includes 180,000,000 order details containing names, phone numbers, emails, addresses, payment details, and a whopping 1,000,000 credit cards. pic.twitter.com/1yefKim24A

— Alon Gal (Under the Breach) (@UnderTheBreach) April 18, 2021

According to the report, user information collected as part of the pizza chains breach also allegedly includes internal files of about 250 of the company's employees. The data amounts to a total of 13 terabytes, although Gadgets360 says that it is yet to confirm this information.

“Jubilant FoodWorks experienced an information security incident recently. No data pertaining to financial information of any person was accessed and the incident has not resulted in any operational or business impact. As a policy we do not store financial details or credit card data of our customers, thus no such information has been compromised. Our team of experts is investigating the matter and we have taken necessary actions to contain the incident,” a company spokesperson told Gadgets360.