2021 Aditya Birla Fashion and Retail — Have I Been Pwned verified incident: ABFRL
Data compromised
Email addresses, Genders, Income levels, Job titles, Marital statuses, Names, Passwords, Phone numbers, Physical addresses, Purchases, Religions, Salutations
Technical writeup
In December 2021, Indian retailer Aditya Birla Fashion and Retail Ltd was breached and ransomed. The ransom demand was allegedly rejected and data containing 5.4M unique email addresses was subsequently dumped publicly on a popular hacking forum the next month. The data contained extensive personal customer information including names, phone numbers, physical addresses, DoBs, order histories and passwords stored as MD5 hashes. Employee data was also dumped publicly and included salary grades, marital statuses and religions. BreachHistory indexes the Have I Been Pwned (HIBP) corpus for third-party breach disclosure and victim notification context; treat record counts and fields as disclosed in that source at time of indexing.
Root cause
Variations by incident; see HIBP narrative and linked disclosures where present.