Paytm Mall has been hit by a data breach . According to a report by Cyble, a cybercriminal group known as John Wick has managed to gain access to the company's database.
According to the sources, the group demanded 10 Ethereum, or about $4,000 as ransom, which it claimed would be received soon from Paytm Mall. The “John Wick” group also claimed that the breach was carried out from the inside.
A Paytm Mall spokesperson said that both user data and data are safe. The spokesperson added that the company is investigating the claims of a “potential data breach” but has not yet discovered “any data loss.” Paytm Mall runs a Bug Bounty in which it rewards “responsible disclosure of any security risks. We work extensively with the security research community and resolve security vulnerabilities.”
This is not the first time Paytm has been reported. In 2018, a company employee, Sonia Dhawan, managed to steal personal data from CEO Vijay Shekhar Sharma and tried to extort Rs 10 million from him.
Earlier this month, the Ahmedabad Cyber Crime Branch arrested two people for allegedly cheating users in different states on the pretext of Paytm KYC update. The police recovered Rs 58.20 crore in different bank accounts of the accused.
The hacking group also uses other aliases such as South Korea and HCKINDIA , according to Cyble. “One of the tactics used by this group is to act as a grey hat hacker and offer assistance to companies or victims to fix their errors.” Zee5, SquareYards, Stashfin, Sumo Payroll, Square Capital, i2ifunding, e27, etc. have also been targets of the hacking group in the past.
