India’s audio brand boAt faces data breach, over 7.55 mln user data compromised

In a significant cybersecurity incident, India’s leading audio brand, boAt, has suffered a data breach that has left the personal information of over 7.5 million customers exposed and up for sale on the dark web.

The leak also threatens the impacted users’ bank accounts and other private data.

Approximately 2GB of data containing Personally Identifiable Information (PII), such as names, addresses, phone numbers, email addresses, and customer IDs, were leaked, according to Forbes India.

On April 5, 2024, the information was allegedly posted on a dark web forum by ShopifyGUY, a hacker. 75,50,000 records in the leak indicate that a large number of consumers’ data was affected.

boAt’s customers impacted by this data breach are at serious risk of financial fraud, identity theft, and phishing scams. The information that was disclosed could be used by cybercriminals to carry out complex social engineering operations, make fraudulent transactions, or obtain unauthorized access to bank accounts.

One of the security analysts suggests that the hackers gained access to the boAt customer database at least one month ago based on the release timeline. The profile of the leaker is relatively new, as they only have a single leak under their name as of now, and it is of BoAt.

The surfacing of the compromised data on the dark web has detrimental effects on boAt’s standing and clientele. The business, which is well-known for its well-liked wearables and audio products, has not yet publicly acknowledged the breach or provided an idea of how it plans to lessen the impact on its clients.

Read More: Over 90 dead as ferry sinks off Mozambique coast