Deliware Allegedly Breached Through Exposed Demo Admin Panel
Summary
NightBroker allegedly accessed Deliware through an exposed demo admin panel. A reported dataset includes 1,572 user records and authentication data, OTPs, password-reset keys, and Stripe API keys; its authenticity and scope are unverified.
Key points
- NightBroker allegedly breached Deliware, an Indian food delivery app, by exploiting an exposed demo administration panel.
- The reported leak comprises six JSON files with 1,572 user records and other business data.
- Reported personal information includes names, phone numbers, email addresses, dates of birth, and geolocation.
- The dataset allegedly contains authentication tokens, OTPs, and password-reset keys.
- An admin settings file reportedly includes Stripe API keys, creating a potential payment-fraud risk.
- The dataset's authenticity and scope remain unverified.
Article Details
- Victim Organization
- Deliware
- Incident Type
- Alleged data breach after exploitation of an exposed demo administration panel
- Data Types Exposed
- Names
- Phone numbers
- Email addresses
- Dates of birth
- Geolocation
- Authentication tokens
- One-time passwords (OTPs)
- Password-reset keys
- Stripe API keys
- Other business data
- Affected Records
- 1,572 user records reportedly included in six JSON files, along with other business data; dataset authenticity and scope remain unverified.
- Affected Data Size
- Six JSON files
- Operational Impact
- Exposure of authentication and payment-related keys could create account-access and payment-fraud risks; no resulting fraud or operational disruption is reported.
- Ransom Or Extortion
- Unknown
- Claim Status
- alleged