Mobikwik Data Breach - The Biggest KYC Data Leak

[Sushubh]

Your data would still be there so it's sort of pointless thing to do. It's clear that they didn't even remove account data which their customers deleted from their accounts.

 

[Sai]

Did anyone try sending a written notice via Registered Letter with acknowledgement via India Post. We can ask a lawyer to draft a template and share it here. Then we can just copy paste the content and send notices. That should do the job for deleting accounts permanently.

 

[ishanjain28]

Mobikwik doesn't let you delete your account. But you may ask them for deactivation. Raised a ticket from the help section of the app for deactivation today. They will supposedly reply within 24 hrs.

They haven't responded to my requests my requests to delete my account multiple times in the past.. It is simply ignored. :/
And their mailbox is full or disabled right now so can't reach them on their official support email either.

 

[Navjot Singh]

Contact Us - MobiKwik

Connect with MobiKwik Follow MobiKwik on social media for daily exclusives exciting offers and plus lots of extra News and more. Download Our App Address Unit No. 102, 1st Floor,

blog.mobikwik.com

They are redirecting people to this page where the phone number listed no longer works. The only way to actually reach them is to ping them on Twitter but I am not really sure if they are accepting or agreeing to deactivation requests.

 

[royalroy]

Maybe we can send complaints to the RBI banking ombudsman about account deletion. This should do the job. Once we send legal notices, RBI ombudsman will not cover our concerns. But we need to wait a month before escalating it to the ombudsman.

 

[Jay]

Source

 

[Navjot Singh]

Source

 

[Jay]

Update from the seller on the original thread:

All of India is worried about this leak as it is 99 million users and 3.5 million users kyc details. We have very long and deep conversations with some independent security researchers about the consequences if data is leaked or sold and decided we will delete all data from our end as Mobikwik is incompetent in that regard. Sadly they are just digging themselves more and we are not as ruthless as all those news reporters whose only aim is to destroy the company and report anything without thinking about consequences and to destroy the company's IPO.

Only Mobikwik company and we have the copy of 8.2 tb data. (They will have more anyway). And as of 10 mins back only mobikwik have it. We deleted all data and 2 backups of all of data from all our servers and small copies of data loaded into server which hosted the infamous onion site. I've done this deletion myself and no foul play here.

Now all of your data is secure with Mobikwik and no one can misuse it except of course Mobikwik for targeted ads or call which everyone does anyway.

We just don't want to see a company dig themselves deeper and bury themselves in.
Guess we all learned some useful life lessons during this past couple of days. Adios.

I'm guessing Mobikwik paid them off. Or maybe not. No reason to trust either of them regarding this.

 

[bhojv74]

deleted - info was already posted above.

 

[bhojv74]

Browsing the raidforum I discovered even Moneycontrol was hacked, never heard about this on twitter: