Today: 27 April 2025
4 January 2021
2 mins read

‘Card Data of 10 Crore Indians’ on Dark Web’

Independent cyber security researcher Rajshekhar Rajaharia claimed that the data was being sold on the Dark Web for an undisclosed amount via cryptocurrency Bitcoin….reports Asian Lite Newsdesk

Independent cyber security researcher Rajshekhar Rajaharia claimed on Sunday that data of nearly 10 crore credit and debit card holders in the country is being sold for an undisclosed amount on the Dark Web.

According to Rajaharia, the massive data dump on the Dark Web has been leaked from a compromised server of Bengaluru-based digital payments gateway Juspay.

JusPay told IANS that no card numbers or financial information were compromised during the cyber-attack and the actual number is much lower than the 10 crore-figure being reported.

“On August 18, 2020, an unauthorised attempt on our servers was detected and terminated when in progress. No card numbers, financial credentials or transaction data were compromised,” a company spokesperson said in a statement.

“Some data records containing non-anonymised, plain-text email and phone numbers were compromised, which form a fraction of the 10 crore data records,” the spokesperson added.

However, Rajaharia claimed that the data was being sold on the Dark Web for an undisclosed amount via cryptocurrency Bitcoin.

“For this data, hackers are also contacting via Telegram,” he told IANS.

According to him, PCI DSS (Payment Card Industry Data Security Standard) have been followed by Juspay in storing users’ card information.



“However, if the hackers can find out the Hash algorithm used to generate the card fingerprint, they will be able to decrypt the masked card number. In this condition, all 10 crore cardholders are at risk,” Rajaharia noted.

The company admitted that the hacker gained access to one of Juspay’s developer keys and was spawning new computation servers in the developer account, trying to gain access to any accessible data.

Juspay, however, said the masked card numbers that have been leaked are not considered sensitive as per compliance.

Only “few” phone numbers and email addresses have been leaked which have dummy values, the spokesperson said, adding that it had intimated its merchant partners about the data leak the very same day.

“No card numbers (like 16-digit card number and other financial credentials) were accessed, as it is stored in a completely different isolated system. No transaction or order information was compromised,” the company spokesperson informed.

“We are making long-term investments for strengthening security and data governance with industry experts,” the company said.

Founded in 2012, Juspay last year raised $21.6 million in its Series B funding round.

The round was led by Sweden’s Vostok Emerging Finance (VEF), which invested $13 million in the technology firm, marking its first investment in the country.

Also read:Prachanda due in India

Previous Story

Prachanda due in India

Next Story

Detecting Fake Images on Social Media

Latest from India News

India Praises UAE’s Global AI Benchmark 

Kaustubh Dhavse, Maharashtra CM’s OSD, hailed the UAE’s AI model as a global benchmark driving digital innovation and attracting global talent…reports Asia Lite News Kaustubh Dhavse, Joint Secretary and Officer on Special

India, Saudi Hold Inaugural Army Staff Talks 

A key highlight of the talks was the exploration of collaboration in operational logistics, battlefield management systems, and niche technologies.  The inaugural Army-to-Army Staff Talks (AAST) between the Indian Army and the

Modi Strengthens Defence, Energy Ties in Saudi

Both sides agreed to hold the next Strategic Partnership Council meeting at a mutually convenient date….reports Asian Lite News India and Saudi Arabia have expanded their bilateral Strategic Partnership Council by adding

Muslim World League Condemns Terror in Pahalgam

Prime Minister Modi commended the firm stand of the Muslim World League against extremism, terrorism and violence….reports Asian Lite News The Muslim World League has condemned the horrific terror attack in Pahalgam,
Go toTop