Security News > 2021 > March > India payment app MobiKwik denies data leak, says customers may have posted own data to Dark Web

Indian payment app maker MobiKwik has denied its security has been breached, saying that if it's true, as has been claimed, that its customers' information has appeared on the dark web, then some other platform was totally responsible for that.
"Some users have reported that their data is visible on the dark web," reads a message from the company, dated March 30.
"While we are investigating this, it is entirely possible that any user could have uploaded her or his information on multiple platforms. Hence, it is incorrect to suggest that the data available on the dark web has been accessed from MobiKwik or any identified source."
Amid its denials and threats of legal action, MobiKwik said it investigated the possibility its systems had been compromised and customer records exfiltrated and leaked.
MobiKwik customers say a sample of the firm's data remains online and for sale.
Try Googling "Mobikwik data breach" now... https://t.
News URL
https://go.theregister.com/feed/www.theregister.com/2021/03/31/mobikwik_data_breach/
Related news
- FBI, Europol, and NCA Take Down 8Base Ransomware Data Leak and Negotiation Sites (source)
- Data Leak Exposes TopSec's Role in China’s Censorship-as-a-Service Operations (source)
- Browser-Based Data Leaks: 3 Biggest Data Security Challenges Today (source)
- Microsoft Adds Inline Data Protection to Edge for Business to Block GenAI Data Leaks (source)
- How does your data end up on the dark web? (source)
- Cardiff's children's chief confirms data leak 2 months after cyber risk was 'escalated' (source)
- Royal Mail investigates data leak claims, no impact on operations (source)
- Legacy Stripe API Exploited to Validate Stolen Payment Cards in Web Skimmer Campaign (source)