Debit-Bank card knowledge of seven million Indians leaked, uploaded to DARK WEB

- Advertisement -

The credit and debit card data of more than 7 million users in the country has been leaked. According to a security researcher, this data has been leaked online through the Dark Web. The leaked data includes not only the names of Indian card holders but also their mobile numbers, income levels, email ID and permanent account November (PAN) details.

Cybersecurity researcher Rajsekhar Rajaharia discovered the Google Drive link on the dark web earlier this month, which was given the title of “Credit Card Holders data”. It is available for download via the Google Drive link. These links are open for public access.

Data provided in 59 excel files
The shared link includes 59 excel files, which include the full name, mobile number, city, income level and email id etc. of the card holders. Apart from this, it includes PAN card number, Employee details. However, the leaked data does not include information on bank account and victim’s card number etc.

Rajaharia told that he has verified some names listed in the excel sheet with the ID of his name on Linkedin and Truecaller. He has even found his own name in this list. There is no clear description of the banks whose cardholders’ information has been leaked in this data. This includes First Swipe Amount for most cardholders.

Data can be from 2010 to 2019
The researcher states that this data may be related to a third party, which serves or leads the bank. This information was first made public by Inc42. The exact information of when this data has been leaked is not clear at the moment. However, it may include information between 2010 and 2019.

Another inc42 report states that the data leaked on the dark web is from some employees of Axis Bank, Bharat Heavy Electricals Limited (BHEL), Kellogg’s India Private Limited and McKenzie & Company. According to the report, the annual income of these employees ranges from Rs 7 lakh to Rs 75 lakh.

What is the dark web?

There are many websites on the Internet that do not fall under the most used search engines like Google, Bing, and general browsing. These are called darknet or deep net. Such websites can be accessed with the help of specific authorization processes, software, and configurations. The Information Technology Act, 2000 provides the statutory framework for addressing all types of prevalent cybercrimes in the country. Law enforcement agencies take action according to this law when they come to notice of such crimes.

- Advertisement -