Mobikwik hacker has even set up a dark web portal to collect the data

MobiKwik has encountered controversy after allegations of an online data leak, comprising details such as Aadhaar details, phone numbers, addresses and KYC details, surfaced on social media. As per allegations, the details of around 3.5 million users are at risk after 8.2 terabytes of data about homegrown financial platform were leaked on the dark web. MobiKwik has come up with a statement, denying the data breach.

The data breach came to light after some MobiKwik users posted screenshots of their financial and KYC details on social media. The dark web link containing these financial details was up for sale for 1.5 bitcoin or $86,000, Business Standard reported. All the details, including Aadhaar, KYC, and address, were visible to anyone, except the password.

MobiKwik has said it has found no such security lapses on its part. A MobiKwik spokesperson said, "Some media-crazed so-called security researchers have repeatedly attempted to present concocted files wasting precious time of our organisation as well as members of the media. We thoroughly investigated and did not find any security lapses. Our user and company data is completely safe and secure."

Rajshekhar Rajaharia, self-proclaimed internet security researcher, posted a series of tweets claiming data of 11 crore Indians is up for sale. "11 Crore Indian cardholders data alleged leaked from @MobiKwik server, the hacker claimed. It seems hacker still have their data. The backup was allegedly taken on 20 Jan 2021. He claims to have MobiKwik access for the last 30 days. @RBI @IndianCERT Please look into this matter."