Mobikwik Data Breach - The Biggest KYC Data Leak

[Sachin23]

have they stopped doing supercash scam? is it proper cashback now? lol.

Still there. Improved a bit since the time they launched it.

 

[ishanjain28]

What's significantly worse is that they are not deleting your details when you remove them from your account. They just hide your details from you so you think they have been deleted.

I had removed my banks/cards from mobikwik atleast a year back and all of them are still present in the breach

 

[Aakash Malhotra]

aakashxxxxxx@xxxxxxxx.com": {
"hashed_password": "xxxxxxxxxxxxxxxxxgYr1AZIzMt.lSZeWFY3jKQI5Iy5tdsn0iu5eOph0Ayabc",
"emails": [
"aakashxxxxxx@xxxxxxx.com"
],
"mobile_numbers": [
"xxxxxxxxxxxx"
],
"account_creation_date": "Dec 29, 2017",
"customer_names": [],
"addresses": [],
"apps_installed": [],
"gps_locations": [],
"phone_details": [],
"bank_cards": [
{
"card_number": "xxxxxxx******xxxxxx",
"holder_name": "aakashxxxxxxx",
"other_card_details": [
"expirymonth",
"expiryyear",
"cvv2"
]
}
],
"bank_accounts": []
}


fields where [] is there, do they actually have that data or is it blank? like I can clearly see that they have my email and number because both the details are there under the section but under address , gps location, bank accounts etc its just [] . so do they have these details as well or is it empty?

 

[Sachin23]

Apart from all my card details, bank details, GPS coordinates, Home address, mobikwik has also stored the data on all the apps that I use on my phone.

Fuck man.. Nothing else is left now! Unnecessary data collection without consent.

 

[Sushubh]

now you have leaked the name of apps you keep on your phone

 

[Sachin23]

Lol.. This is old data. And all apps are standard apps, so I am not worried.
I used these apps probably 4-5 years ago. But nevertheless they still kept this list.

 

[ch@ndlerbing]

If your search query shows 0 records found, do it 2-3 times more. Mine was showing was same but after 4-5 try, it is showing all my details.

 

[bhojv74]

The link provided is not opening. How can I check?

Used torbrowser. Also, you need to search multiple times, at times it does not fetch the records from the database.

 

[ch@ndlerbing]

What should be the next steps? The data dump is showing one of my main savings account debit card details.

 

[Sachin23]

@ch@ndlerbing Double check that your international transactions are turned off on the card. An extreme step would be to get yourself new cards issued. Not sure about the savings account. But for future purposes I have decided to keep a separate account for online transactions with minimum money in it.