Mobikwik Data Breach - The Biggest KYC Data Leak

[Smh]

I searched multiple time using mobile number and email.

Kyc files shows 0 and DB just shows loading.

The only payment I did with mobikwik failed so I wrote to support, from those emails it seems I used my credit card to pay which I recently closed. So hopefully not much damage done. I also lost that mobile number bcoz the network operator shut down their business.

Should I login to mobikwik account

 

[ch@ndlerbing]

Not sure how true this is.

How can hackers use the leaked data to apply for instant loan?

 

[Sachin23]

Not impossible. You just need name and KYC documents. Mobile number spoofing as suggested by sushubh earlier.

 

[Jonas]

It's not fetching any data now, seemingly. If you ever signed up, it would at least have the phone number and email.

 

[Smh]

The site is working as I tried a random number mentioned on that site and it showed kyc results but no db details.

For my number it shows 0 and db loading

 

[Jonas]

It fetched my data yesterday, returning a 0 now.

 

[Smh]

Just hope the password I used was not common.
Important information was credit card number which is useless as that is inactive now.
Rest of the info if leaked I cannot really do much.

 

[Sudarshan61]

Source



Not sure how true this is.

One can't complete the eKYC without OTP

Getting someone's PAN card numbers, Aadhaar number and hash number of credit/debit card is one thing being able to use it is other..

Credit/debit card needs full 15/16 digits ..just having hash number is useless..

 

[Jay]

KYC documents is the main deal breaker here. You may not be able to complete ekyc if you walk into an Airtel store in a metro, but an unscrupulous mobile shop guy from a rural area can easily open a new sim account with the scan of an aadhaar card. Just a possible scenario. A large trove of KYC documents possibly in millions in this case is perfect for social engineering.

 

[Jay]

Source

Some users have reported that their data is visible on the darkweb. While we are investigating this, it is entirely possible that any user could have uploaded her/ his information on multiple platforms.

We strongly recommend that you do not try to open any darkweb/anonymous links as they could jeopardize your own cyber safety.

LOL