Report: Database of 20 million BigBasket users allegedly leaked online

Details:

• The leaked data includes users’ email addresses, phone numbers, street addresses, scrambled passwords, dates of birth, and their interactions with the service.
• The database was allegedly published by a hacker called ShinyHunters, who has made it available for anyone to download on a cybercrime forum. At least two threat actors reportedly claimed that they had decoded the hashed passwords and put them up for sale.

Context:

• The incident comes after reports stating that Tata Group is buying an over 60% stake in BigBasket, bringing the startup’s valuation to between US$1.8 billion and US$2 billion.
• In September 2020, reports said that US retail giant Walmart was in discussions to invest up to US$25 billion in Tata Group in exchange for a large stake in the Indian conglomerate’s proposed super app.