5 lakh Indians impacted in latest debit and credit card leak

New Delhi : After healthcare data and medical images were leaked earlier this week, a database containing debit and credit card details of around 5 lakh Indians has found to be sold on dark web marketplace Joker’s Stash, which had earlier came to light due to a similar incidence.

The database was first spotted online by a Singapore-based cybersecurity company Group-IB. Out of the debit and credit card details mentioned in the list 98% belonged to the Indian banks, Group-IB said in a statement.

While, the source of database could not be located, Group-IB alerted Indian Computer Emergency Response Team (CERT-In) after the discovery.

According to the company, the database had different debit and credit card numbers with their expiry date and CVV numbers. In some cases, cardholders' full name, emails, phone numbers, and addresses were also exposed in the breach.

A report by Group-IB mentioned that the detail of each card was being sold for $9 each, taking the total worth of the database to $4,157,784. The details were uploaded online on February 5 under the name ‘INDIA-BIG-MIX’. Till February 6, 16 cards from this database were sold out, Group-IB added.

Within the span of 12 months, this is the second time when Group-IB has alerted about a breach in which card details of Indians were compromised. In October 2019, around 1.3 Mn debit and credit card details were put up for sale on Joker’s Stash.