Seller Claims 3.1 Million DZI Insurance Records, Including ID and Passport Numbers

· Original article ↗

Summary

A forum seller claims to offer 3,134,269 DZI Insurance records containing identity and contact details, allegedly obtained through a poorly secured customer-portal API. The breach claim is unverified, and DZI has not publicly addressed it.

Key points

  • A forum actor using the name Intelligence claims to be selling 3,134,269 DZI Insurance records.
  • The records reportedly include national ID and passport numbers, passport issuing details, addresses, and contact information.
  • The seller alleges the data was obtained through a poorly secured API on DZI's customer portal.
  • The records are reportedly being offered privately to two buyers, with further releases promised.
  • The claim remains unverified, and DZI has not publicly addressed it.

Article Details

Victim Organization
DZI Insurance
Incident Type
Alleged exposure of customer records through a poorly secured customer portal API
Data Types Exposed
  • National ID numbers
  • Passport numbers
  • Passport issuing details
  • Addresses
  • Contact details
Affected Records
3,134,269 records, according to the seller's claim
Ransom Or Extortion
The seller claims the records are being offered privately to two buyers, with more releases promised.
Claim Status
claimed

Threat Actors

Industries