Star Health Insurance, one of India's largest health insurers, is dealing with a massive data breach that has compromised the sensitive information of around 31 million customers. The stolen data, which includes names, PAN numbers, mobile numbers, email addresses, birthdates, residential addresses, policy numbers, and medical records, is being sold online for $150,000.
Key Points:
Data Breach: 31 million customers' sensitive information compromised
Data Sale: Hacker claims data sold by Star Health's CISO for $43,000
Investigation: Star Health denies involvement, launches forensic investigation
Consequences: Identity theft, financial fraud, phishing attacks, extortion attempts
Action: Star Health files lawsuit against hacker and Telegram
Data breaches are becoming more frequent, more costly, and more devastatingIBM, Security Report
Star Health Insurance faced allegations from hacker xenZen of actively selling sensitive customer information, rather than being a victim of theft. The hacker, known as xenZen, claims that Star Health's Chief Information Security Officer, Amarjeet Khanuja, sold the data to them for $43,000. However, Star Health has denied any involvement in the breach or data sale, calling it a "targeted malicious attack”. Experts point to potential lapses in Star Health's security protocols, allowing hackers to access sensitive data. The company's cybersecurity infrastructure is now under intense scrutiny.
I am leaking all Star Health India customers and insurance claims sensitive data. This leak is sponsored by Star Health and Allied Insurance Company, who sold this data to me directlyXenZen, Hacker
The consequences of this breach are severe, with risks of identity theft, financial fraud, phishing attacks, and extortion attempts. Star Health has launched a forensic investigation and is working with government agencies to address the situation. They have also filed a lawsuit against the hacker and Telegram, where the stolen data was shared.
Customers and experts demand greater transparency from Star Health regarding the breach, including details on the extent of the damage and measures taken to prevent future incidents. Star Health customers are anxious about the potential misuse of their personal and medical information. Many have expressed concerns about identity theft, phishing attacks, and targeted scams. Indian authorities have taken notice of the breach, with regulatory bodies launching investigations into the incident. The government is also considering stricter data protection laws to prevent similar breaches.
(Input From Various Sources)
(Rehash/Neha Kamble/MSM)