Bharat Sanchar Nigam Limited (BSNL), India's state-owned telecom provider, suffered a major data breach affecting millions of users.
Behind the cyberattack is a threat actor named “kiberphant0m“. It is said that more than 278 GB of sensitive data and millions of users are at risk, as the stolen data can be used for SIM card cloning, identity theft and financial fraud.
According to a report by Athentian Tech, the compromised data includes IMSI numbers, SIM card details, home location register (HLR) data, and security.
See also: Neiman Marcus confirms data breach after Snowflake
This data could enable various attacks and frauds targeting not only BSNL but also interconnected systems and networks, posing significant risks to national security .
Kanishk Gaur, CEO of Athentian Tech, told The Economic Times that the compromised data is being sold on the dark web for $5,000. Gaur stressed that this data breach goes beyond typical user information and targets the core of BSNL's operating systems.
This incident marks the second data breach of BSNL in the last six months. In December 2023, a threat actor known as “Perell” leaked data belonging to BSNL fiber and landline users.
See also: Accenture: Hackers claimed responsibility for data breach
Possible risks:
SIM cloning and identity theft: Attackers can create duplicate SIM cards to gain access to bank accounts and commit fraud.
Financial losses: Bypassing security measures and accessing bank accounts could lead to significant user losses.
Service disruption: Unauthorized access to telecommunications functions can cause service disruptions and degrade performance.
National security threats: breach could impact critical systems and compromise national security, given that it is a state-owned telecom provider.
See also: Advance Auto Parts: Data breach affects employees
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
Experts urge BSNL to investigate and curb the breach immediately.
Users are also advised to monitor their accounts for unusual activity, enable two-factor authentication, and remain vigilant against phishing and social engineering. Customers may need to invest time and resources to protect their data.
This data breach could affect customer trust in BSNL. Customers may feel that the company is not adequately protecting their personal data. This situation could lead to loss of customers and a decline in the company's reputation.
Source: gbhackers.com
