“Domino’s India Data Breach 13TB employee files and customer details. Search your phone number or mail id. 180M rows searchable,”
reads a web page with a search link created by a hacker who claims to have breached the pizza major’s servers.
The data breach involves as many as 180 million users with leaked information of over 1 million credit cards, mobile numbers, email addresses, and GPS locations that have been made available on the web.
When contacted, Jubilant Foodworks, the parent company of Domino’s in India said that they had experienced an “information security incident” and denied any “financial information was accessed” by the hackers.
“As a policy, we do not store financial details or credit card data of our customers, thus no such information has been compromised. Our team of experts is investigating the matter and we have taken necessary actions to contain the incident,” the company spokesperson said.
However, this data has been put up on a search engine of sorts, according to cybersecurity researcher Rajshekhar Rajaharia.
Rajharia said, “The worst part of this alleged breach is that people are using this data to spy on people. Anybody can easily search any mobile number and can check a person’s past locations with date and time. This seems like a real threat to our privacy.”