17 mn Zomato users' stolen data now being sold online
17 mn Zomato users' stolen data now being sold online
17 million user records stolen from restaurant guide Zomato
19 May, 2017, 12:27
The stolen information contains user email addresses and "hashed" passwords but no payment information or credit card data has been stolen/leaked, Zomato said in a blog post. A screenshot of the vendor's sale page for stolen data posted on HackRead identifies the hashing algorithm as "MD5", which experts say is "outdated" and "insecure".The research team at infySEC-a cyber security company from Chennai-tried to access user information in Zomato's database, as part of its bug bounty program. The company said it will be actively working to plug any more security gaps in its systems. 'We look forward to working more closely with the ethical hacker community to make Zomato a safer place for our users, ' it further stated. The marketplace link which was being used to sell the data on the dark web is also reportedly no longer available, as per the blog.
Since this was a hacker from an ethical group that checks for any loopholes, they shared what exactly was done to steal the data and the Zomato team has plugged that loophole to prevent any further breaches.
"No other information was exposed to anyone".
"Technically what they are saying is correct, i.e. a hashed password can not be decrypted, but what they aren't saying is - it is technically possible to break the hashing algorithm to guess the passwords". The company said in a statement, "As a precaution, we have reset the passwords for all affected users and logged them out of the app and website. His/her key request was that we run a healthy bug bounty program for security researchers", he said.
Zomato, that has over 120 million users, however said that all the payment records were safe. "This means your password can not be easily converted back to plain text".
The investigation into the breach is ongoing but users who use the same password across multiple websites and social media platforms are being advised to change their password as soon as possible.
Password "hashing" is an encryption technique usually used for large online user databases.
There was some panic on Thursday after Zomato put up a blog post stating that data of 17 million accounts had been stolen. Contrast this to the "surface web" that can easily found through a search engine.
This is not the first time that Zomato has been hacked. Would Zomato be liable to compensate end users for loss of sensitive data?
They'll be looking for a similar outcome after Game 1, as they look maintain their status as the Eastern Conference's top dog. Bradley Beal led the Wizards , playing their first Game 7 since 1979, with 38 points - including 24 in the second half.
Putin said Russian Federation was categorically opposed to any expansion of the "club of nuclear powers". But analysts warned that Moon will have a hard path to weave, with THAAD already near fully operational.
Putin said the controversy was a sign of "political schizophrenia" in the U.S. that was meant to incite "anti-Russian sentiment". According to the Times , Comey wrote in the February memo that Trump told him Flynn had done nothing wrong.
Bush and Barack Obama , and was the longest-serving head of the Federal Bureau of Investigation since J. Comey's performance at a May 3 congressional hearing also played a role in his dismissal, Trump said.
'It's an global attack and a number of countries and organisations have been affected, ' British Prime Minister Theresa May said. Government ministers were due to hold an emergency response meeting later on Monday to deal with the crisis.
The Firm operates through four divisions: Business Solutions, Entertainment Group, Consumer Mobility and global . Shore Capital reaffirmed a "buy" rating on shares of Wpp Plc in a research note on Wednesday, April 19th.
The cost could reach a staggering $100 billion. "He is invited definitely because it is an Arab and Muslim country", Nugali said. In a speech, he is expected to say that the Mideast struggle isn't between Islam and the West, but between good and evil.
Medical Properties Trust (NYSE:MPW) shares traded -0.82% down during most recent session to reach at the closing price of $13.23. The average 12 month price objective among brokerages that have issued a report on the stock in the a year ago is $14.00.
Asked if Mueller's appointment would preempt his own request for Comey information, the Iowa Republican replied, "I don't know". HollywoodLifers , do you think Robert's appointment could lead to President Trump's impeachment? "It's special", Trump said.
Get daily prep sports headlines from the Gwinnett Daily Post staff delivered to your email. Jones was considered one of the draft's most productive wide receivers.
Khawaja to lead Australia 'A' in SA tour
Meanwhile, the Australian selectors have also named the one-day squad for tri-series featuring South Africa A and India A. He could yet be in line for a leadership role with Victoria and the Melbourne Stars next summer.
Trump Would Have Fired Comey 'Regardless of Recommendation'
The FBI will provide crucial support to congressional investigators, and the press will keep digging deeper into this story. Previous presidents have made a public show of staying out of legal matters, so as not to appear to be injecting politics.
Ordered released from prison, man faces removal
A Colorado man who was sent back to prison after being mistakenly released was told by a judge Tuesday he is a free man. An error in prison paperwork said Lima-Marin was to serve his sentences concurrently instead of consecutively.
Celtics overcome Wizards, set up Cavs clash
The Celtics only win came in Boston by four points, and Kevin Love did not play. "End of the third quarter was big for us". Cleveland and Boston last met in the playoffs in 2015, when the Cavs swept the Celtics out of the first round.
Penguins look to even up series with Senators
As we know, there's no better place than home for the Penguins, and the table is set for some redemption for them in Game 2. Though the 35-year-old was superb in Game 1, Pittsburgh made it far too easy, failing to get any traffic in front of him.
Corbyn: A proper debate has to include the Prime Minister
The Daily Mail have published a report heavily criticising JME - following the grime artist's conversation with Jeremy Corbyn . He suggested winning 200 seats - almost 30 fewer than in 2015 - would be a "successful" result for Mr Corbyn.
Protester killed, AP journalist wounded in West Bank clash
He said that while cooperation would continue, intelligence professionals would "think twice" before sharing information. A photographer with Associated Press news agency was also wounded by gunfire but was in a stable condition, medics said.