Policybazaar exposes millions of Indian Customers’ data
By MYBRANDBOOK
Research firm CyberX9 has claimed that Chinese Investor-Backed Policybazaar has allegedly exposed sensitive and confidential personal, health, and financial data of around 56.4 million of its customers including defense personnels and potentially compromises national security.
A Policybazaar spokesperson said the identified vulnerabilities have been duly fixed as confirmed by an external advisor. “A thorough forensic audit of the incident has been initiated with external advisors. The incident was covered by the media. We have nothing further to add,” the spokesperson said.
The information exposed includes customers’ photo, full name, date of birth, complete residential address, email address, mobile number, credit report, PAN number, policy details including nominee details, family members’ policies details, bank account statements, income tax returns, Passport, immigration visa, records of country entry and exit, Aadhaar card (both sides), driving license, health records, payslips.
For Indian defense personnels, the data was being exposed along with that data of a “Defense questioner” that Policybazaar takes from people working in Indian defense forces, including the questionnaire replies by defense personnels who bought policy from Policybazaar.
Apart from the above mentioned data, details of which specific branch of Indian defense forces someone is in like Indian Army, Navy, Air force, and even specifics if someone is in one of the Indian special forces like SPG, Black Cat commando, CoBRA, Anti Terrorist Squad, current rank and designation in that defense force, current location of posting, details if someone is engaged in any hazardous activities, e.g. aviation, diving, parachuting, bomb disposal or special service groups, and length of service in those roles, details if someone in Indian defense is currently serving in or is under orders to proceed to any troubled area, or around border areas of India, details of someone handling weapons or explosives were also leaked.
After informing Policybazaar about the vulnerabilities, CyberX9 reported the incident to cyber security watchdog CERT-In. National security agencies have initiated action against Policybazaar.
Nazara and ONDC set to transform in-game monetization with ‘
Nazara Technologies has teamed up with the Open Network for Digital Comme...
Jio Platforms and NICSI to offer cloud services to government
In a collaborative initiative, the National Informatics Centre Services In...
BSNL awards ₹5,000 Cr Project to RVNL-Led Consortium
A syndicate led by Rail Vikas Nigam Limited (abbreviated as RVNL), along wi...
Pinterest tracks users without consent, alleges complaint
A recent complaint alleges that Pinterest, the popular image-sharing platf...
SAMRIDDHI AUTOMATIONS PVT. LTD.
BPE INDIA PVT. LTD.
HP INDIA SALES PVT. LTD.
TVS ELECTRONICS LTD.
ICONS OF INDIA : RISHAD PREMJI
Rishad Premji is Executive Chairman of Wipro Limited, a $11.3 billion ...
Icons Of India : Arjun Malhotra
Arjun Malhotra, the Chairman of Magic Software Inc., is widely recogni...
ICONS OF INDIA : VINAY SINHA
Vinay Sinha is the Managing Director of Sales for the India Mega Regio...
ITI - ITI Limited
ITI Limited is a leading provider of telecommunications equipment, sol...
BEL - Bharat Electronics Limited
BEL is an Indian Government-owned aerospace and defence electronics co...
HPCL - Hindustan Petroleum Corporation Ltd.
HPCL is an integrated oil and gas company involved in refining, market...
Indian Tech Talent Excelling The Tech World - Sundar Pichai, CEO- Alphabet Inc.
Sundar Pichai, the CEO of Google and its parent company Alphabet Inc.,...
Indian Tech Talent Excelling The Tech World - AJAY BANGA, President - World Bank
Ajay Banga is an Indian-born American business executive who currently...
Indian Tech Talent Excelling The Tech World - Aman Bhutani, CEO, GoDaddy
Aman Bhutani, the self-taught techie and CEO of GoDaddy, oversees a co...