Domino’s Pizza Data Hacked: Credit Card Details of 10 Lakh Users Reportedly Sold for Over Rs 4 Crore on Dark Web

New Delhi: In what could add to latest string of cyber breaches at India-based entities, a cyber security researcher on Sunday claimed that credit card details of nearly 10 lakh people who purchased online on Domino's Pizza India is allegedly being sold for over Rs 4 crore on the Dark Web. According to Alon Gal, CTO of security firm Hudson Rock, a threat actor has claimed to have hacked Domino's India database worth 13TB. Beware! New WhatsApp Flaw Allows Hackers To Deactivate Your Account Using Your Mobile Number, Here's How.

There have been a string of hacking incidents involving Indian firms in the recent past, including Bigbasket, BuyUcoin, JusPay, Upstox and others. Gal earlier this month claimed that personal data of nearly 533 million (53.3 crore) Facebook users, including 61 lakh Indians, were leaked online after a hacker posted the details on a digital forum. The leaked data included Facebook ID numbers, profile names, email addresses, location information, gender details, job data, and other details. Facebook said the data was old.

"This is old data that was previously reported on in 2019. We found and fixed this issue in August 2019," a Facebook spokesperson had said in a statement.

The threat actor is looking for around $550,000 (approximately Rs 4 crore) for the database and saying they have plans to build a search portal to enable querying the data, Gal claimed.

"I had alerted CERT-in about a possible Domino's Pizza India hack where the threat actor got data access with details like 200 million orders and personal data of the users too. The hacker, however, did not provide any sample," Rajaharia said. "Information includes 180,000,000 order details containing names, phone numbers, emails, addresses, payment details and a whopping 1,000,000 credit cards," Gal claimed in a tweet. "Plenty of large scale Indian breaches lately, this is worrying," he added.

Domino's India was yet to react to Gal's tweet. Independent cyber security researcher Rajshekhar Rajaharia told IANS that he had alerted about this possible hack to the CERT-in (India's national cyber defence agency) on March 5.

(The above story first appeared on LatestLY on Apr 19, 2021 09:46 AM IST. For more news and updates on politics, world, sports, entertainment and lifestyle, log on to our website latestly.com).