Zomato hacked - 17 million users loses data because of poor cyber security

Texas (USA), Canada (Toronto) & India (Business Network)- 19th May 2017: Zomato, India’s leading food technology company has confirmed the news that on Thursday 18th May,
17 million users’ sensitive data had been hacked.
According to the Zomato blog, over 120 million users visit Zomato every month. 17 million user records from Zomato’s database have been stolen. The stolen information has user IDs, Names, Usernames, Email addresses, and Passwords.
According to Hackread.com, hackers (nclay) has claimed the data stolen is up for sale in the dark web marketplace. The price for all this data is set at $1,001.43 (0.5587 bitcoins).

Zomato released a note to press saying ‘Since we have reset the passwords, affected users' Zomato account as well as credit card information is secure, so there is nothing to worry about there.’ According to Zomato’s founder Deepinder Goyal’s twitter post, 60% of users use Google/Facebook for logging in to Zomato. Hence these users’ data is at zero risk.

Cyber security consultant tweeted that he verified sample data from the dark web market and claimed Zomato has used MD5 to hash passwords which can be cracked in seconds.

However Zomato has claimed in his blog “passwords with a one-way hashing algorithm, with multiple hashing iterations and individual salt per password”

The good news is payment information is stored in separate secure PCI Data Security Standard (DSS) compliant vault, not affecting the data.

Zomato’s security measures has been proved lagging behind indicating a serious need for time to time Cyber security testing.

About Suma Soft:
For over 17years, SumaSoft has been providing Cyber Security Consultation and building robust IT security roadmaps for companies worldover. We help provide advanced digital forensic analysis of computers, network communications, mobile devices and deliver solutions through investigation of fraudulent activities.

For over 17years, SumaSoft has been providing Cyber Security Consultation and building robust IT security roadmaps for companies worldover. We help provide advanced digital forensic analysis of computers, network communications, mobile devices and deliver solutions through investigation of fraudulent activities.

Suma Soft Private Limited, “SumaCenter”,
2nd Floor, Opposite Himali Society. Erandawane,
Pune, Maharashtra – 411004

This release was published on openPR.