{"id":3254,"date":"2025-04-14T10:03:34","date_gmt":"2025-04-14T10:03:34","guid":{"rendered":"https:\/\/serisec.com\/index.php\/2025\/04\/14\/hackers-allegedly-leaked-1-59-million-rows-of-indian-insurance-users-sensitive-data\/"},"modified":"2025-04-14T10:03:34","modified_gmt":"2025-04-14T10:03:34","slug":"hackers-allegedly-leaked-1-59-million-rows-of-indian-insurance-users-sensitive-data","status":"publish","type":"post","link":"https:\/\/serisec.com\/index.php\/2025\/04\/14\/hackers-allegedly-leaked-1-59-million-rows-of-indian-insurance-users-sensitive-data\/","title":{"rendered":"Hackers Allegedly Leaked 1.59 Million Rows of Indian Insurance User\u2019s Sensitive Data"},"content":{"rendered":"<p>    Hackers Allegedly Leaked 1.59 Million Rows of Indian Insurance User\u2019s Sensitive Data<br \/>\n \t<BR><br \/>\n<BR><\/BR><br \/>\n    <!-- no image --><br \/>\n \t<BR><br \/>\n<BR><\/BR><\/p>\n<div>\n<p>Hackers allegedly claim that a software company based in India was compromised on December 19, 2024, by a hacker identified as @303. The breach exposed approximately 1,590,798 rows of sensitive data, including customer information and administrative credentials.<\/p>\n<p>The dataset, initially leaked on the dark web forum by a user known as \u201cfrog,\u201d contains email addresses from major Indian insurance providers, mobile numbers, and potentially confidential administrative access credentials. <\/p>\n<p>The Sample data analyzed by Cyber Security News contains information about employees of prominent insurance companies, including HDFC Ergo, Bajaj Allianz, ICICI Lombard, and others.<\/p>\n<figure class=\"wp-block-image size-large\"><img data-recalc-dims=\"1\" decoding=\"async\" src=\"https:\/\/i0.wp.com\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEgJicGmxj1adjQa3hw2OSUG1RSjPUVsm3smD330QXbJpQsQyhOEydXA7M8YJTrgr1gLoUqDznisi6rhwBch3wnG80YT3as2J8W_nvTiAjB662-xO5WZnRmZQsUFWMDm0DsQ3KEpC2pW32b9MxdlGPBGBL9gl0bdshc3gfL3D0TnkvJZfhDU3pLEjzH6tZVH\/s16000\/Insurance%2520database.png?ssl=1\" alt=\"\"><figcaption class=\"wp-element-caption\">Dark web claim by Hacker<\/figcaption><\/figure>\n<p>The leaked SQL database file breach includes customer policy information, contact details, and potentially sensitive internal system commands that could further compromise the affected organizations\u2019 security infrastructure.<\/p>\n<p>This incident raises serious questions about the company\u2019s security protocols, especially given their advertised commitment to \u201cprotecting data with unwavering diligence.\u201d<\/p>\n<p>The Insurance Regulatory and Development Authority of India (IRDAI) has recently been taking a more proactive stance on cybersecurity following similar incidents. <\/p>\n<p>In March 2025, the regulator instructed all insurers to appoint <a href=\"https:\/\/cybersecuritynews.com\/what-is-digital-forensics\/\" target=\"_blank\" rel=\"noreferrer noopener\">forensic<\/a> auditors in advance to ensure a prompt response to cyber incidents. The regulator also directed insurance companies to perform comprehensive IT system audits following recent data leaks.<\/p>\n<p>Cybersecurity experts familiar with the matter suggest the compromised data could be exploited for various malicious activities, including identity theft, targeted phishing campaigns, and unauthorized system access.<\/p>\n<p>According to a recent IBM report, the average cost of a data breach in India reached an all-time high of \u20b919.5 crore in 2024, with the insurance sector being particularly vulnerable.<\/p>\n<p>This breach follows several other high-profile incidents in India\u2019s insurance sector, including the <a href=\"https:\/\/cybersecuritynews.com\/hackers-star-health-insurance-ciso-sold\/\" target=\"_blank\" rel=\"noreferrer noopener\">Star Health Insurance<\/a> breach in October 2024 that reportedly affected 31 million customers and a potential data leak at Niva Bupa Health Insurance reported in February 2025.<\/p>\n<p>\u201cThis incident demonstrates the ongoing vulnerability of India\u2019s financial services sector to cyberattacks,\u201d said a leading cybersecurity expert, adding that \u201ccompanies holding sensitive customer data must implement more robust security measures including regular security audits and employee training.\u201d<\/p>\n<p>As investigations continue, this incident highlights the critical need for data protection in India\u2019s quickly changing insurance industry. There has been a 261% rise in cyberattacks in the first quarter of 2024 alone.<\/p>\n<p>We have contacted the relevant software company to request a statement regarding the claim.<\/p>\n<p class=\"has-text-align-center has-background\" style=\"background:linear-gradient(180deg,rgb(238,238,238) 89%,rgb(169,184,195) 100%)\"><strong><code>Equip your team with real-time threat analysis With ANY.RUN\u2019s interactive cloud sandbox -&gt;\u00a0<a href=\"https:\/\/any.run\/demo?utm_source=csn&amp;utm_medium=article&amp;utm_campaign=grandoreiro&amp;utm_content=demo_2&amp;utm_term=090425\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">Try 14-day Free Trial<\/a><\/code><\/strong><\/p>\n<p>The post <a href=\"https:\/\/cybersecuritynews.com\/hackers-allegedly-leaked-1-59-million-rows\/\">Hackers Allegedly Leaked 1.59 Million Rows of Indian Insurance User\u2019s Sensitive Data<\/a> appeared first on <a href=\"https:\/\/cybersecuritynews.com\/\">Cyber Security News<\/a>.<\/p>\n<\/div>\n<p> \t<BR><br \/>\n <BR><\/BR><br \/>\n    Guru Baran<br \/>\n \t<BR><br \/>\n<BR><\/BR><br \/>\n<a href=\"https:\/\/cybersecuritynews.com\/hackers-allegedly-leaked-1-59-million-rows\/\">Go to cyber-security-news<\/a><br \/>\n \t<BR><br \/>\n <BR><\/BR><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Hackers Allegedly Leaked 1.59 Million Rows of Indian Insurance User\u2019s Sensitive Data Hackers allegedly claim that a software company based in India was compromised on December 19, 2024, by a hacker identified as @303. The breach exposed approximately 1,590,798 rows of sensitive data, including customer information and administrative credentials. The dataset, initially leaked on the [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[129,63,946],"tags":[130],"class_list":["post-3254","post","type-post","status-publish","format-standard","hentry","category-cyber-security","category-cyber-security-news","category-data-beach","tag-cyber-security-news"],"_links":{"self":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/posts\/3254"}],"collection":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/comments?post=3254"}],"version-history":[{"count":0,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/posts\/3254\/revisions"}],"wp:attachment":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/media?parent=3254"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/categories?post=3254"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/tags?post=3254"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}