Financial details of almost 35 lakh MobiKwik users is available on the Dark Web for sale, according to independent cybersecurity researcher Elliot Alderson. In February, security researcher Rajshekhar Rajaharia also flagged the same issue, which the company had denied at the time. This time, too, the company has denied the data breach. In his statement though, Bipin Preet Singh, stated that users upload their personal information on other platforms. That is how they could've ended up on the dark web. He added that the company conducted a thorough investigation within its servers when Rajshekhar first reported the incident.
This time, French cybersecurity researcher Elliot Alderson tweeted that this was probably, the largest KYC data leak in history. In a tweet (now unavailable), he outlined that the dark web had 8.2 TB worth of database and contained 36,099,759 files up for sale.
According to the reports, the data on the dark web includes personal details like phone numbers and email ID of users. It also includes their Bank account number, PAN, Aadhar and Credit/Debit card details along with Expiry date and CVV. A user even confirmed the presence of his data in the link that Elliot Alderson shared.
My data on @MobiKwik has been breached and posted online.
It includes my email, passwords, Bank Account details, Card details, phone number, Account Creation date, etc.#mobikwik #MobikwikDataLeak #DataLeak pic.twitter.com/49I4azGQ2u— Prateek Pardeshi (@par_prateek) March 29, 2021
The soon-to-go-on-IPO fintech platform, however, denied any breach. It said that its user and company data are completely safe and secure.
The complete statement from MobiKwik
You can read the company statement from its blog, or the following tweet from CEO Bipin Preet Singh.
A note to our users. pic.twitter.com/J3WRM0Ko8v
— Bipin Preet Singh (@BipinSingh) March 30, 2021
The matter has repetitively come to light as the company plans to go on an IPO in the coming months. The company had, only last week raised $7.2 million in a funding round. Currently, the company valuation stands at $493 million.