Aadhaar details, phone numbers of nearly 75 crore Indians put up for sale, says cybersecurity firm

Personal data such as Aadhaar details and mobile phone numbers of nearly 75 crore Indians has been allegedly put up for sale online, said digital threat analysis company CloudSek in a report on Wednesday.

The company said that its digital risk protection platform discovered that a threat actor named CyboDevil had made a post on an “underground forum” promoting the sale of the comprehensive mobile network consumer database on Tuesday.

It said that a similar post was made by another threat actor named UNIT8200 on January 14 on the instant messaging platform Telegram.

The database allegedly includes the name of the mobile user, their phone numbers, residential addresses, Aadhaar details and names of their family members.

The CyboDevil and UNIT8200 are a part of the CYBOCREW group, which was founded around July 2023. The CYBOCREW group has been “linked to significant breaches, targeting Netplus Co, Zivame, Giva Co, and a Hyundai data breach affecting 2.1 million individuals”, according to the cybersecurity firm.

In its report, the firm also included screengrabs of the posts made on Telegram and the “underground forum”. It, however, did not mention if CloudSek had independently verified the dataset.

It said that the exact way in which the data was breached is not clear but...

Read more