Another leading mobile payment application Mobikwik is suffered from a data breach after the 8.2 TB data of millions of users have been circulated on the dark web this month.

The leaked data holds the crucial information of the users which includes the following things;

• Customer Namers
• Email Addresses
• Residential Addresses
• Hashed Passwords
• Installed Application
• Credit Card details
• Account Numbers
• KYC data
• GPS Locations

The leaked data also displays that the mobile application Mobikwik hasn’t deleted the card information of the users from the servers and the data breached also penetrated the government rules and regulations.

What Actions Organization Take?

New guidelines have been issued by India’s apex banking institutions and the RBI also prohibits the details of online merchants and other e-commerce websites and the information of payment aggregators that are used with storing the data of customers and the updated rule is stated implemented on July 2021 respectively.

According to the researcher, the data breached is wasting the time of precious organizations that is getting to grab the attention of the media. According to the investigation, the allegations did not find any security vulnerabilities, and the sample text file that is showcasing proves nothing.

However, multiple users also confirmed that while finding the personal details of the MobiKwik India data leak that leads the data breach.

As per the sources, the incident will compromise the originally advertised database that was leaked on the forum on February 24, and the hacker is claiming access to 6TB data from an unknown Paytm competitor.

The Cyber experts Rajaharia also disclosed the leak and outed the organization’s identity and also warned MobiKwik over the emails the organization also take security measures to stop the hackers while downloading the data.

The experts also said that they lost access to the main company servers and it cannot download the new data. They also added that they never wanted to give the money but the biggest mistake was the KYC issue.

Summering Up

The MobiKwik spokesperson also said that the data is shared on the dark web and the information is retrieved from its servers. The company also said that we are working with the relevant law firm agencies and they carry out every step to overcome the effects of it.

Whereas, some users also reported that the data is now visible on the dark web, while the investigation is under process and it is possible that the data leaked is uploaded on multiple platforms. It is also not correct that the data available on the dark web is associated with MobiKwik from the identified source.