Bengaluru-based 'JusPay' refutes 10 cr card data breach claim, says only 3.5 cr users' info leaked

Agencies
January 6, 2021

Juspay.jpg

Bengaluru, Jan 6: Bengaluru-based digital payments gateway JusPay on Tuesday clarified that about 3.5 crore records with masked card data and card fingerprint were compromised by a hacker and the claim of 10 crore cardholders' data being affected is “incorrect". Responding to claims made by independent cyber security researcher Rajshekhar Rajaharia on Sunday that data of nearly 10 crore credit and debit card holders in the country is being sold for an undisclosed amount on the Dark Web -- leaked from a compromised server of Juspay, the company said in a fresh statement that none of its merchants and their customers are at any risk.

"The masked card data is used for display purposes on merchant UI and cannot be used for completing a transaction. A part of user metadata in our system which has non-anonymised, plain-text email IDs and phone numbers got compromised," the company informed.

"On August 18, 2020, an unauthorised attempt on our servers was detected and terminated when in progress," it added.

According to JusPay, no full card numbers, order information, card PINs and passwords were leaked.

"We conducted a thorough audit on the day of the incident which confirmed that our 'Secure Data Store' which hosts the 16-digit encrypted card numbers was not accessed and remains secure. The cyberattack was identified in an isolated/separate system," JusPay elaborated.

"We can confirm that the compromised data does not contain any transaction or order information, as the intrusion was terminated before such an access."

Rajaharia had told IANS that the data was being sold on the Dark Web for an undisclosed amount via cryptocurrency Bitcoin.

"For this data, hackers are also contacting via Telegram," he said, adding that if the hackers can find out the Hash algorithm used to generate the card fingerprint, they will be able to decrypt the masked card number.

"In this condition, all 10 crore cardholders are at risk," Rajaharia noted.

JusPay said that it has made significant investments in security and data governance and its policies are aligned to globally accepted data protection standards.

"We did identify gaps in some of the older access keys and moved them to non-access key-based authentication supported by hosting providers. We have also made two-factor authentication (2FA) mandatory for all the tools accessed by our teams," the company said.

According to Saurabh Sharma, Senior Security Researcher (GReAT), Kaspersky (APAC), data leaks due to internal vulnerabilities has become a common instance in India, especially in the last two years.

"Enterprises and institutions have begun to understand the importance of having a strong security framework to save themselves from an external attack by a cybercriminal. However, they tend to overlook the internal vulnerabilities that can prove to be very damaging to their reputation and business if exploited by the bad guys," Sharma told IANS.

Regular network and server evaluation, proactive detection of zero-day vulnerabilities and patching them immediately, launching attractive bug-bounty programmes and promptly informing the users of a potential leak are some of the "mandatory steps that large enterprises and institutions should follow in order to stay away from cybercriminals and save their reputation," he added.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
News Network
January 13,2025

Udupi: A resident of Karkala in Udupi district has accused five individuals of defrauding him of nearly Rs 2 crore under the guise of business partnerships.

Dawood Hakim, a resident of Ennehole in Marne village, Karkala, has filed a complaint stating that he operated a mobile sales and service business on Karkala Market Road for 15 years. He had known the accused for over two decades and trusted them implicitly.

According to Dawood, the accused convinced him to invest in multiple business ventures, including land dealings and a travel business, promising substantial returns and partnership benefits. Believing their assurances, Dawood reportedly handed over cash, gold, and a vehicle.

However, the promised profits never materialized, and the accused allegedly failed to return the money or assets. Dawood claims this deception has caused severe financial distress to him and his family, amounting to a loss of around Rs 2 crore.

A case has been registered at the CEN police station, and investigations are underway.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
News Network
January 3,2025

Karnataka's Urban Development Minister, BS Suresha (Byrathi), has initiated a detailed investigation into ₹5,527 crore worth of projects executed under Prime Minister Narendra Modi’s flagship Smart Cities Mission in six cities of the state.

The minister expressed dissatisfaction with the quality of work in Belagavi, Davangere, Hubballi-Dharwad, Mangaluru, Shivamogga, and Tumakuru. To ensure accountability, Suresha announced the formation of a committee comprising experts from universities and the Indian Institute of Science. The committee will assess the projects and submit its findings within three months.

Bengaluru, however, is excluded from the probe as it falls under the jurisdiction of Deputy Chief Minister DK Shivakumar.

Launched in 2015, the Smart Cities Mission aims to enhance urban infrastructure across 100 cities in India, funded jointly by the central and state governments. Karnataka has spent ₹6,405 crore under this mission, including ₹877.72 crore in Bengaluru.

"Most of the funds have been allocated to roads, drainage, and park maintenance," Suresha lamented in a statement. "The focus should have been on creating permanent infrastructure such as smart schools, hospitals, libraries, and bus stands."

Suresha pointed out that, on average, each Smart City in Karnataka received ₹990 crore, with spending patterns revealing 36% on roads, 8% on energy, 2% on education, 2% on healthcare, and 5% on sports. He criticized this distribution, emphasizing that projects under the mission should have developed long-lasting government assets instead of temporary solutions like roads and drains.

With the mission slated to conclude in March 2025, Suresha urged the remaining funds to be directed towards constructing world-class smart schools. "This will enable children from economically weaker sections to access quality education," he said.

The minister also revealed that he had received multiple complaints from elected representatives about substandard work, particularly in Belagavi, Hubballi-Dharwad, and Shivamogga. The probe, he assured, will prioritize transparency and accountability.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
News Network
January 6,2025

Two cases of Human Metapneumovirus (HMPV) were reported in Bengaluru on January 6 - a 3-month-old baby who has been discharged and an 8-month-old who is recovering at a hospital in the Karnataka capital. This marks the first reported cases of HMPV in India.

The infected infants and their families have no recent travel history, ruling out exposure from other regions or countries, the health department said.

HMPV is a respiratory virus that often causes mild symptoms resembling a cold but can lead to other complications, particularly in infants, the elderly, and those with weakened immune systems. The virus can occasionally trigger pneumonia or exacerbate chronic respiratory conditions. Cases typically rise during the winter and early spring.

The Centre announced on Sunday that it is monitoring HMPV and other respiratory viruses, especially following recent reports of increased respiratory illnesses in China. A Joint Monitoring Group (JMG) convened on January 4 to evaluate the situation, with representatives from the World Health Organisation (WHO), National Centre for Disease Control (NCDC), Indian Council of Medical Research (ICMR), and other health organisations participating.

Respiratory illnesses in China align with seasonal variations caused by viruses such as influenza, RSV, and HMPV. Current surveillance data from India does not indicate any unusual surge in respiratory infections, according to the Ministry of Health and Family Welfare.

As a precaution, the Centre has increased laboratory capacity for HMPV testing. The ICMR will monitor HMPV trends throughout the year, alongside other respiratory illnesses such as influenza-like illness (ILI) and severe acute respiratory infections (SARI). A robust network of surveillance systems, including those operated by ICMR and the Integrated Disease Surveillance Programme (IDSP), continues to track respiratory infections across the country.

Hospitals have been advised to strengthen isolation protocols for suspected cases, ensure the availability of essential medicines, and promptly report ILI and SARI cases through the Integrated Health Information Platform (IHIP).

Precautions to Take:

To reduce the risk of HMPV infection, individuals are advised to:

  • Wash hands frequently with soap and water for at least 20 seconds.
  • Avoid close contact with people who have respiratory symptoms.
  • Wear masks in crowded or high-risk areas, especially during seasonal outbreaks.
  • Maintain good indoor ventilation by keeping windows open when possible.
  • Disinfect commonly touched surfaces regularly, such as doorknobs, toys, and tables.
  • Monitor infants, the elderly, and people with chronic illnesses for symptoms like persistent cough or breathing difficulties.
  • Seek prompt medical attention if respiratory symptoms worsen or persist. 

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.