Data leak shock for India’s newest telecoms company
POLICE in the western Indian state of Rajasthan yesterday detained a man suspected of involvement in what might be a major leak of user data from India’s newest telecoms company Jio, a police official said.
Jio, run by India’s richest man, Mukesh Ambani, and his conglomerate Reliance Industries, said this week that it was investigating whether personal data of more than 100 million of its customers had been leaked to a website named “Magicapk.com”.
The company said it was working with law enforcement agencies to investigate the alleged leak, which cybersecurity analysts said could be the first large-scale data leak from an Indian telecoms firm.
The local police official, who asked not to be named, said Imran Chhimpa was detained yesterday.
In a July 5 post on Frendz4m, an online message board, a person with Chhimpa’s Internet Protocol (IP) address and using the handle “imranchhimpa”, posted a link to “Magicapk. com” saying that the site could provide personal user details of anyone with a Jio connection.
The post said that the data was obtained from original documents.
The proprietor of the local internet service provider said police asked him for the installation address of that particular IP address, and made him accompany them to Chhimpa’s home, where he was later detained.
A spokesperson for Jio said there was no immediate comment on the company’s own investigation into the alleged leak.
On Monday, Jio said the data leak appeared to be “unauthentic”, and the company’s subscriber data was safe and maintained with the highest security.
Some Jio users, though, took to Twitter to say they were concerned that personal information on Magicapk.com could be accurate.
Some Indian media said their own checks suggested leaked data were authentic.
The Indian Express newspaper said it was able to cross-verify details on a number of Jio customers.
The Magicapk.com website showed as “suspended” from late Sunday.
Jio was launched last September and already boasts more than 100 million subscribers after drawing in users with months of free service and cut-price deals.
Analysts said if the names, contact numbers, e-mail addresses and unique Aadhaar numbers of all Jio customers were compromised, it would be a major setback for the company. – Reuters