← BigBasket

2020 Data breach — 20M Indian users

2020 20.0M records affected Share on X

Data compromised

Names, Email addresses, Password hashes, Phone numbers, Addresses, Order details, Location data

Technical writeup

BigBasket grocery delivery platform suffered a breach in October 2020. Cyble detected the leak on Oct 30; hackers listed the database for sale on dark web for $40,000. Exposed data included names, emails, password hashes, phone numbers, addresses, DOB, order details, location and IP addresses.

Root cause

Database breach; data dumped on dark web.

References