The biggest data hack just happened!

Status
Not open for further replies.
kalph09

kalph09

Galvanizer
Long story short.

Some guy put up 1 Billion user's data containing Chinese citizen's police records for a price of 10 bitcoins ($200,000 ish)

The data appears to be legit as per cyber security researchers.

Data is super granular. Example: One citizen was on police watch for using a VPN to access Twitter. They have complete logs, sites visited, where the person is located, etc.

Whole data was sitting behind a simple password (no MFA, no IP whitelisting, nothing) on a cloud facing the internet. CCP is in a state of denial, as usual.

www.euronews.com

China may have just suffered one of the biggest data hacks in history

Data on one billion people in China has been leaked, according to hackers, in what could be one of the biggest breaches ever.
www.euronews.com www.euronews.com

I wouldn't be surprised when our Aadhar database gets leaked. (again)

The last time when I went to enroll aadhar for someone(2021) the post office was still using an old barely patched Win 7 desktop with IE 8 (yes 8!) the website was held together with a shared password.
 
Last edited:
  • Like
  • Wow
Reactions: Pratikh, Futureized, Leg3nd and 6 others
Very much possible (insider job) , I mean its literally billions of data they wont just have it that unsecured that it could fall into wrong hands especially having a bad fame for collecting lots of other countries user data.
But the news seems to be quite old too ,like a month ago the Chinese govt people were behind US hackers. Who knows what's true and what's not!

blr_p said:
How is it possible to download that much with nobody noticing ?
Click to expand...
Could be negligence ...insider work ? I mean they didn't even acknowledge till someone literally leaked it out .
 
kalph09 said:
I wouldn't be surprised when our Aadhar database gets leaked. (again)
Click to expand...
What are the consequences ? Let's say it happened again.

Some guy put up 1 Billion user's data containing Chinese citizen's police records for a price of 10 bitcoins ($200,000 ish)
Click to expand...
I wonder what the asking price for India's aadhar db will be. More or less ? i'm guessing less, maybe lot less.

Data is super granular. Example: One citizen was on police watch for using a VPN to access Twitter. They have complete logs, sites visited, where the person is located, etc.
Click to expand...
That right there is why your comparison is false. Super granular, matched up with all sorts of stuff. And that is by design and is what the CCP would like to do beyond their borders as well. And they are well on their way to doing that through their hardware, software and networking. And what do we know about the Chinese, nothing as much as they know about us. So this hack is a way to bridge that gap ;)

Didn't the UIDAI people say aadhar isn't correlated with anything more than your biometrics in their database. All aadhar does is say whether so and so is who claims to be so. That's it.

If other entities want to do linking and data mining its out of the govt's hands. But aadhar isn't the way they will go about it. Private entities have come up with their own ways to uniquely ID people.
 
Last edited:
I have heard people scamming people by transacting money from their bank account via adhaar bank name and fingerprint information.
It's best to be aware and especially turn these fingerprint related services ON only when needed
 
blr_p said:
What are the consequences ? Let's say it happened again.


I wonder what the asking price for India's aadhar db will be. More or less ? i'm guessing less, maybe lot less.

Didn't the UIDAI people say aadhar isn't correlated with anything more than your biometrics in their database. All aadhar does is say whether so and so is who claims to be so. That's it.

If other entities want to do linking and data mining its out of the govt's hands. But aadhar isn't the way they will go about it. Private entities have come up with their own ways to uniquely ID people.
Click to expand...

I am unable to use quotes properly. Please excuse me if there is confusion.

Consequences could be something like identity theft. It may not happen now or in near future. Maybe much later when am old only to find out on a fine morning my pension money is wiped out.

Price, I would go with less considering leaks have happened in the past.

How are FinTech companies able to pull out your bank and credit card details just by using a phone number? Try IndMoney as an example. What is the guarantee they would keep it safe after the MobiQuik fiasco?
 
  • Like
Reactions: Kaleen Bhaiya
kalph09 said:
Consequences could be something like identity theft. It may not happen now or in near future. Maybe much later when am old only to find out on a fine morning my pension money is wiped out.
Click to expand...
Are there any documented fraud cases that have arisen as a result of the last aadhar leak ?
kalph09 said:
Price, I would go with less considering leaks have happened in the past.
Click to expand...
ah, that would affect the price. I was going on the part that its not linked up to the extent as this chinese one.
kalph09 said:
How are FinTech companies able to pull out your bank and credit card details just by using a phone number? Try IndMoney as an example. What is the guarantee they would keep it safe after the MobiQuik fiasco?
Click to expand...
Are they using aadhar as the basis to do their mining or their own methods. Any ideas.
 
blr_p said:
Are there any documented fraud cases that have arisen as a result of the last aadhar leak ?

ah, that would affect the price. I was going on the part that its not linked up to the extent as this chinese one.

Are they using aadhar as the basis to do their mining or their own methods. Any ideas.
Click to expand...

A search on the internet pulls up articles like this. Not necessarily a large scale data leak.

For someone to get several 1000's of SIM cads to run a scam call center, where would they go for getting aadhar data?

1657701184672.png

1657701241404.png

Try installing Zerodha or IndMoney. They call it aadhar/KYC verification (no, Voter ID or passport does not work here) in order to complete registration.
 
  • Like
Reactions: blr_p
kalph09 said:
A search on the internet pulls up articles like this. Not necessarily a large scale data leak.
Click to expand...
This is what they have to prepare for. Does not have to be large leak. A series of small ones over a period of time that can be collated works too.
 
kalph09 said:
Some guy put up 1 Billion user's data containing Chinese citizen's police records for a price of 10 bitcoins ($200,000 ish)
Click to expand...
Fun fact: I heard that is the entire population of China. Everyone including kids

Now we know their population ain't as big as they say ;)
 
blr_p said:
Fun fact: I heard that is the entire population of China. Everyone including kids

Now we know their population ain't as big as they say ;)
Click to expand...

If they are good at one thing, that is bloating numbers. This includes GDP, Per Capita, PPP, etc.

www.afr.com

China admits its GDP data is fake

It has long been suspected but never proven. Now Liaoning Province, in the rust belt of northern China, has admitted to faking its economic growth data.
www.afr.com www.afr.com
 
  • Like
Reactions: gokul.ece22, Kaleen Bhaiya and blr_p
t3chg33k said:
This is old news now. Really doubt anyone has seen the actual data yet.

With respect to Aadhar, it has already leaked several times, the latest one being more extensive.
Click to expand...
kalph09 said:
I wouldn't be surprised when our Aadhar database gets leaked. (again)

The last time when I went to enroll aadhar for someone(2021) the post office was still using an old barely patched Win 7 desktop with IE 8 (yes 8!) the website was held together with a shared password.
Click to expand...
Just wondering, if my Aadhar data is leaked, apart from misusing the identity, hackers/intruders still wont be able to access my monetary sites.. (banks etc.)
What would be correct misuse of stolen Aadhar card, as we deal with sharing Aadhar nowadays at any required point for getting new sim etc.
 
kalph09 said:
If they are good at one thing, that is bloating numbers. This includes GDP, Per Capita, PPP, etc.

www.afr.com

China admits its GDP data is fake

It has long been suspected but never proven. Now Liaoning Province, in the rust belt of northern China, has admitted to faking its economic growth data.
www.afr.com www.afr.com
Click to expand...
The GDP figure being unreliable came from the wiki cables leak back in 2010

www.reuters.com

China's GDP is "man-made," unreliable: top leader

China's GDP figures are "man-made" and therefore unreliable, the man who is expected to be the country's next head of government said in 2007, according to U.S. diplomatic cables released by WikiLeaks.
www.reuters.com www.reuters.com
 
Futureized said:
What would be correct misuse of stolen Aadhar card, as we deal with sharing Aadhar nowadays at any required point for getting new sim etc.
Click to expand...
Aadhar number + OTP is your signature online.

One can open bank accounts in your name, get loan, sign legal documents and much more.
 
  • Wow
Reactions: Futureized
Status
Not open for further replies.
Top Bottom