2022 — BharatPay: CloudSEK found backend database on cybercrime forum, 37K records
Data compromised
Usernames, passwords, phones, UPI IDs, balances, transactions
Technical writeup
Aug 2022. CloudSEK found backend database on cybercrime forum. Data Feb 2018–Aug 2022: usernames, hashed passwords, mobile numbers, UPI IDs, employee emails from insurance/banking firms. Personal info, bank balances, transaction data.
Root cause
Database leak; unauthorized access.