Last Updated:
CyberPeace’s investigation reveals that the stolen data is being sold in bulk, with records available in batches starting from 1,00,000 entries.
HDFC Life Insurance confirmed the data breach.
If you’re a policyholder with HDFC Life Insurance, it’s crucial to stay vigilant. A massive data breach has come to light, exposing the personal details of up to 1.6 crore customers. According to CyberPeace, a prominent cybersecurity organisation, this sensitive customer data is being sold on a Dark Web forum for 2,00,000 USDT (Tether cryptocurrency).
The leaked information includes highly sensitive details such as policy numbers, names, mobile numbers, email addresses, dates of birth, home addresses, and even health statuses. The exposure of this personal data, especially policy numbers, has prompted CyberPeace to warn individuals about potential risks, urging them to remain alert and take necessary precautions.
In response to the breach, HDFC Life Insurance confirmed that some customer data had indeed been leaked. Last month, the company issued a statement acknowledging that certain data fields were being circulated by an unknown source, and malicious intent was suspected. They assured the public that a full investigation was underway to evaluate the extent of the damage and to assess any potential risks to customers.
CyberPeace’s investigation reveals that the stolen data is being sold in bulk, with records available in batches starting from 1,00,000 entries. While the identity of the hackers behind this breach remains unknown, the organisation stated that a significant portion of the data has already been sold to interested buyers, heightening concerns over its potential misuse. The fact that a large part of the data has already been circulated raises alarms about the severity of the situation and the potential for identity theft or fraud.
This breach at HDFC Life Insurance is not an isolated incident. Just a few months ago, in October, similar concerns arose regarding Star Health Insurance. Reports surfaced that hackers had stolen and were attempting to sell over 7.24 TB of sensitive customer data, affecting more than 3.1 crore individuals. The stolen information was reportedly being auctioned for $1,50,000, further highlighting the increasing vulnerability of the insurance sector to cybercriminal activity.
As the investigation into HDFC Life’s data breach continues, customers are urged to monitor their accounts closely and report any suspicious activity. It’s crucial to stay informed and take proactive steps to protect personal information in the wake of such cyber threats.