7 million BHIM users data exposed in CSC website breach: Report
According to a report by a virtual private network (VPN) review website, millions of users of the government’s digital payment app BHIM may be vulnerable to cyber-attacks and e-frauds due to an alleged data breach. The breach has exposed 7.26 million personal information records such as names, date of birth, age, gender, addresses and Aadhaar card details among others to the public domain, vpnMentor wrote in a blog post.
“The scale of the exposed data is extraordinary, affecting millions of people all over India and exposing them to potentially devastating fraud, theft, and attack from hackers and cyber criminals,” it wrote on Sunday.
The website also claimed that the data was leaked due to a security oversight by the company CSC e-Governance Services, which provides government’s digital services in rural areas.
According to the research led by vpn Mentor’s Noam Rotem and Ran Locar, CSC connected the new website to a misconfigured S3 bucket to promote BHIM usage across India and sign up new merchant businesses. This was not protected with security protocols.
However, the National Payments Corporation of India (NPCI), which manages the app, dismissed the report and claimed that all data is secured.
“We have come across some news reports which suggest data breach at BHIM App. We would like to clarify that there has been no data compromise at BHIM App and request everyone to not fall prey to such speculations. NPCI follows high level of security and an integrated approach to protect its infrastructure and continue to provide a robust payments ecosystem,” NPCI said in its statement.
Happiest Minds Technologies announces IDaaS MSSP solution powered by OneLogin
Happiest Minds Technologies has announced the launch of Identity Vigil 2.0, a ne...
Micro Focus’ CyberRes partners with Google Cloud for High-Scale secure cloud analytics
CyberRes, a Micro Focus line of business, announced a partnership with Google Cloud to sup...
TeamViewer expands partnership with RealWear
TeamViewer announced a major expansion of its partnership with RealWear, a provider of ass...
NVIDIA to host GTC conference
NVIDIA announced that it will host its next GTC conference virtually from September 19-22,...
Crayon Software Experts India hosts Crayon Connect CIO Event 2022
Crayon Software Experts India has organized their flagship customer event, the Crayon Conn...
BPE Celebrates 22 years of Trust, Leadership & Success
Best Power Equipments (BPE) celebrated its 22nd anniversary on Saturday, 23 July 2022, at...
India Mobile Congress declares the schedule for 6th edition of the IMC
Hon’ble Minister of Communications, Electronics & Information Technology and Rai...