A menace actor by the title of LeakBase has shared a database containing private info allegedly affecting 16 million customers of Swachh Metropolis, an Indian grievance redressal platform.
Leaked particulars embrace usernames, e mail addresses, password hashes, cellular numbers, one-time passwords, final logged-in occasions, and IP addresses, amongst others, in keeping with a report shared by safety agency CloudSEK with The Hacker Information.
The web site is at present inaccessible.
The Swachhata Platform is a part of the Indian authorities’s Swachh Bharat Mission (translated as Clear India Mission) nationwide initiative to “obtain common sanitation protection.”
In keeping with Cyble, the database includes 101,718 distinctive e mail addresses and 15,835,111 distinctive cellular numbers, placing customers vulnerable to phishing, smishing, social engineering, and id theft.
The cybersecurity agency stated that the breach probably leveraged compromised credentials belonging to administrator and non-administrator accounts, doubtless obtained by way of a brute-force assault.
An evaluation of the dataset additionally confirmed that the most recent login was noticed on Could 20, 2022, indicating that the menace actor carried out the exfiltration exercise on that date.
Customers of the service are really useful to implement a robust password coverage, rotate passwords, and allow two-factor authentication.
