Ransomware victim disclosure
← All victimsBigbasket.com De-Hashed data leaked sql db
Claimed by Darkleakmarket · listed 5 years ago
Status timeline
- Listed
Sep 9, 2021
- Data leaked
At a glance
- Group
- Darkleakmarket
- Status
- Data leaked
- Country
- India
- Sector
- Retail & Consumer
- Listed on leak site
- Sep 9, 2021
About the victim
AI dossier — public-source company profileBigbasket.com is India's largest online grocery store and supermarket, offering over 40,000 products from more than 1,000 brands to over 10 million customers across 300+ cities and towns. The platform provides scheduled and instant (15–30 minute) grocery delivery services covering fresh produce, dairy, meat, branded foods, household, and beauty products. It operates under the brand 'bigbasket' and is headquartered in India.
- Industry
- Online Grocery & Supermarket Retail
- Employees
- 10001+
- Founded
- 2011
Attack summary
Severity: critical — Bigbasket has over 10 million customers; a de-hashed SQL database dump implies large-scale exfiltration of PII and cracked user credentials, constituting a critical-scale regulated/sensitive data breach affecting millions of individuals.The Darkleakmarket group claims to have obtained and published a de-hashed SQL database belonging to Bigbasket.com, indicating exfiltration of credential/account data. No ransom was stated and the data is listed as already published.
Data the group says was taken
AI dossier — extracted from the leak post- De-hashed user credentials (SQL database)
- Customer account records
- Hashed/cracked passwords
- Personally identifiable information (PII) of customers
Sources
- Victim sitebigbasket.com
Source
Indexed 5 years agoThis page surfaces a public ransomware disclosure indexed by Darkfield. Original posts come from the operator's own leak site; we cross-check against ransomware.live, RansomLook and RansomWatch where applicable. Share this URL freely.
