Security News > 2021 > April > Hacker leaks 20 million alleged BigBasket user records for free
A threat actor has leaked approximately 20 million BigBasket user records containing personal information and hashed passwords on a popular hacking forum.
This morning, a well-known seller of data breaches known as ShinyHunters posted a database for free on a hacker forum that he claims was stolen from BigBasket.
As is typical for older breaches privately sold by ShinyHunters, the threat actor has now released the whole database for free, which reportedly contains more than 20 million user records.
The passwords are hashed using the SHA1 algorithm, and forum members have claimed to crack 2 million of the listed passwords already.
As BleepingComputer has confirmed that some of the records are accurate, including information specific to the BigBasket service, customers should play it safe and assume that their customer info has been leaked as well.
It is strongly suggested that all BigBasket users immediately change their passwords on BigBasket and at any other sites using the same password.