- Popular Indian smartwatch and audio device manufacturer, boAt, has been hit by a major data breach
- Personal details of 7.5 million users have been stolen and are now being sold on the dark web
- A hacker by the name of ShopifyGUY has claimed responsibility for the attack
boAt has suffered a major data breach in which the data of 7.5 million users were stolen and is now up for sale on the dark web. The stolen data includes the name, address, email ID, contact number, and customer ID of the users. Overall, around 2GB of data has been stolen from the company.
The report of the attack was first published by Forbes but was later confirmed through interaction with customers who have purchased boAt products.
A hacker by the name of ShopifyGUY has claimed responsibility for the attack. This is a relatively new hacker – we didn’t find any records of any other data breaches that they might have done.
Timeline & impact of the breach
The news was made public yesterday but experts believe that data was compromised at least a month ago. Speaking of the impact, these types of massive data breaches have long-term effects.
The data is available for just 8 credits online. This means that for just 2 Euros, anyone can have the information of the victims. After a few days, the data might even surface on Telegram for free.
Considering the type of data stolen, identity theft and financial fraud are also some possibilities. Scammers might also create fake profiles using the stolen credentials and then target friends and acquaintances of the victims by impersonating them.
As for the company, the consequences will be equally severe.
boAt’s response & the next course of action
boAt has neither responded to our request for comment nor made any official statement about the incident yet.
However, Security Brigade founder, Yash Kadakia, has some suggestions.
- He feels the first step should be to notify the affected customers and see if there’s anything they can do to reduce the damage.
- Next, a thorough investigation should be conducted to find how the hacker got access to the company’s internal network and what else might have been compromised.
- It’s important to gauge the extent of the attack to minimize the damage.
- Last but not least, the company also needs to revamp its security measures to prevent another attack in the future.
Share 
Krishi Chowdhary Journalist 
Question & Answers (0)