Domino’s India user data allegedly breached, up for sale on the dark web: Report
The past couple of months have seen a spate of data breaches at multiple online companies and services around the world, including a couple of Indian companies who were also reportedly affected. While some companies have attributed the leaks to scraping of publicly available data, others have denied they were compromised.
Domino’s India appears to be the latest company to have been affected by a data breach, according to Gadgets360. The breach reportedly includes customer data including phone numbers, names, and payment information including credit cards, which was collected earlier this month, the report says.
The alleged breach was discovered by Alon Gal, the CTO of Hudson Rock, a cybersecurity firm. Gal tweeted about the breach on Sunday, claiming that the data was being sold for around ₹4.5 crore (10 Bitcoin). The data was reportedly gleaned from the company’s internal files between 2015 and 2021, containing details about 18 crore orders and 10 lakh credit cards, according to the report.
Threat actor claiming to have hacked Domino's India (@dominos) and stealing 13TB worth of data.— Alon Gal (Under the Breach) (@UnderTheBreach) April 18, 2021
Information includes 180,000,000 order details containing names, phone numbers, emails, addresses, payment details, and a whopping 1,000,000 credit cards. pic.twitter.com/1yefKim24A
According to the report, user information collected as part of the pizza chains breach also allegedly includes internal files of about 250 of the company’s employees. The data amounts to a total of 13 terabytes, although Gadgets360 says that it is yet to confirm this information.
“Jubilant FoodWorks experienced an information security incident recently. No data pertaining to financial information of any person was accessed and the incident has not resulted in any operational or business impact. As a policy we do not store financial details or credit card data of our customers, thus no such information has been compromised. Our team of experts is investigating the matter and we have taken necessary actions to contain the incident,” a company spokesperson told Gadgets360.