Download Certificate- CMOs | ECIO | Most Admired Brand | Most Trusted Company

Indane Gas Leaked 6,700,000 Aadhaar Data


By MYBRANDBOOK


Indane Gas Leaked 6,700,000 Aadhaar Data

Millions of Aadhaaar numbers that were leaked by Indane by LPG. Indane serves more than 90 million famillies through a network of 9100 distributors. The reason could be Indane supposedly exposed a part of its database that contained consumers’ names, addresses, and Aadhaar numbers. However, Indianoil denies the allegations.


Another reason could be ,A part of Indane website for dealers and distributors was left indexed in Google, allowing anyone to gain unlimited access to the consumers’ database, without any need to enter a username and password, a new research claims.

The potentially compromised details include names, addresses and the customers’ confidential Aadhaar numbers hidden in the link of each record. The estimated number of affected consumers is 6,791,200.


What are the preventive measures you can take:


- Treat all your incoming calls, text messages and e-mails with additional caution. Leaked data of this kind usually serves to personalize phishing and scams.

 

A French researcher Mr. Alderson claimed that he found a major security lapse that allegedly exposed millions of Aadhaar numbers of dealers and distributors associated with Indane, an LPG brand owned by the Indian Oil Corporation .
 

This page contains lots of informations such as,


- The hyperlink associated to the “Consumer No” contains a parameter called “aadhar_no”
- The “Consumer Name”
- The “Consumer Address”
- On the bottom right we have the “Total Records”
- In the url, there is a parameter called dealerID.

 

This is the dealer portal, so if we modify the value of the dealer ID parameter, we can access the consumer infos of another dealer. So, to get the size of this leak we need to get the ids of the Indane dealers.

 

Indian Oil has strongly refuted reports that there has been any Aadhaar data leak through Indane Gas website. In a statea statement issued today, the PSU said, "Indian Oil in its software captures only the Aadhaar number which is required for LPG subsidy transfer. No other Aadhaar related details are captured by Indian Oil.

 E-Magazine 
 VIDEOS  Placeholder image

Copyright www.mybrandbook.co.in @1999-2024 - All rights reserved.
Reproduction in whole or in part in any form or medium without express written permission of Kalinga Digital Media Pvt. Ltd. is prohibited.
Other Initiatives : www.varindia.com | www.spoindia.org