Credit card details of nearly 10-lakh people, who purchased online on Domino’s Pizza India, is allegedly being sold for over Rs 4 crore on the Dark Web, claimed a cyber security researcher on Sunday.
According to Alon Gal, CTO of security firm Hudson Rock, a threat actor has claimed to have hacked Domino’s India database worth 13TB.
The threat actor is looking for around $550,000 (approximately Rs 4 crore) for the database and saying they have plans to build a search portal to enable querying the data, Gal claimed.
“Information includes 180,000,000 order details containing names, phone numbers, emails, addresses, payment details and a whopping 1,000,000 credit cards,” Gal claimed in a tweet.
“Plenty of large-scale Indian breaches lately, this is worrying,” he added.
Independent cyber security researcher Rajshekhar Rajaharia said that he had alerted about this possible hack to the CERT-in (India’s national cyber defence agency) on March 5.
“I had alerted CERT-in about a possible Domino’s Pizza India hack where the threat actor got data access with details like 200 million orders and personal data of the users too. The hacker, however, did not provide any sample,” Rajaharia said.
There have been a string of hacking incidents involving Indian firms in the recent past, including Bigbasket, BuyUcoin, JusPay, Upstox and others.
