Paytm Mall data breach: No security lapses found, all data completely safe and secure, says company

By: |
Updated: Aug 30, 2020 9:05 PM

The e-commerce unit of payment solutions provider Paytm, Paytm Mall, on Sunday said it has not found any security lapses yet after investigating claims of a possible hack and data breach.

paytm mall data breachUS-based cyber research firm Cyble had said a hacker group with the alias ‘John Wick’ was able to gain unrestricted access to Paytm Mall’s databases.

The e-commerce unit of payment solutions provider Paytm, Paytm Mall, on Sunday said it has not found any security lapses yet after investigating claims of a possible hack and data breach. The clarification came after US-based cyber research firm Cyble had said a hacker group with the alias ‘John Wick’ was able to gain unrestricted access to Paytm Mall’s databases.

“We would like to assure that all user, as well as company data, is completely safe and secure… We have been investigating the claims of a possible hack and data breach, and haven’t found any security lapses yet,” a Paytm Mall spokesperson said in a statement.

The spokesperson added that the company invests heavily in data security, and also has a Bug Bounty programme under which it rewards responsible disclosure of any security risks.

“We extensively work with the security research community and safely resolve security anomalies,” the spokesperson said. Cyble, in a blog, had said: “…it appears the actor gained access to their production database and potentially affects all accounts and related information at Paytm Mall”.

Cyble said based on information available to it, the hack happened “due to an insider at Paytm Mall” and noted that the claims, however, are unverified.

“Our sources also forwarded us the messages where the perpetrator also claimed they are receiving the ransom payment from the Paytm Mall as well. Leaking data when failing to meet hackers demands is a known technique deployed by various cybercrime groups, including ransomware operators. At this stage, we are unaware that the ransom was paid,” Cyble said.

The perpetrator had reportedly demanded 10 ETH (Ethereum) equivalent to USD 4,000. Cyble said it has reached out to Paytm Mall for any comments and is awaiting to hear back.

Get live Stock Prices from BSE, NSE, US Market and latest NAV, portfolio of Mutual Funds, calculate your tax by Income Tax Calculator, know market’s Top Gainers, Top Losers & Best Equity Funds. Like us on Facebook and follow us on Twitter.

Financial Express is now on Telegram. Click here to join our channel and stay updated with the latest Biz news and updates.

Next Stories
1TCS to be collected by seller from October 1 only if turnover exceeds Rs 10 cr: CBDT
2Commercial mining: Vedanta, Adani, Hindalco, JSPL among 42 bidders for coal blocks
3ECLGS: Micro firms get maximum loans from banks under credit guarantee scheme; medium units ‘bypassed’