TrueCaller Data Leak: 4.75 Cr Indians Data for Sale on Dark Web 👨‍💻

TrueCaller Data Leak

Hi Guys! Today in this post I'm going to tell you about TrueCaller Data Leak, and will also tell you what TrueCaller has said all about this. I'm also going to tell you about what TrueCaller had done with their Indian Customers in 2019.

An Online Cyber Firm Cyble, in it's 26 May 2020 Tweet informed that a well-known hacker was selling TrueCaller's 4.75 Indian Customer Data on Dark Web for just $1000. Below I have attached Tweet of Cyble.

47.5 MILLION INDIAN TRUECALLER RECORDS POSTED FOR SALE ON #DARKWEB FOR ONLY $1000!!https://t.co/eLNdNHSxYW#infosec #CyberAttack #DarkWeb #Leak pic.twitter.com/CmchiMoR28

— Cyble (@AuCyble) May 26, 2020

As informed by Cyble, the data includes personal information like Phone Number, City, Gender, Facebook ID, e-Mail, and Mobile Network Carrie, etc.

Well, in reply to this, the Company has denied to any such Data Breach, and said that, "databases are secured with bank-grade security. And their Brand Name are just misused to give authenticity to those Data."

They also added to this that, "We were informed about a similar sale of Data in May 2019. What they have here is the same datasets as before."

Later, on 27 May 2020 tweet, Cyble informed that the same hacker is selling 600 Million records. Well this doesn't only belong to Indians, but to many other Nationals also. And also, these records were outsourced by other websites. Below I have attached Tweet of Cyble.

After @Truecaller leak, the same actor has dropped another 600 Million records for sale :O @BleepinComputer #cyber #cybersecurity #breached #infosec pic.twitter.com/GofQkvCFbZ

— Cyble (@AuCyble) May 27, 2020

TrueCaller UPI Bug

In Aug 2019, TrueCaller updated their Android App to v10.41.6. As reported by a twitter user, this version of app used to automatically create a UPI Account with ICICI Bank, for the user without their consent.

Thought I'd look at the @Truecaller app to see what changed to cause the bug (diff between 10.40.7 and 10.41.6)

Likely was just a accidental bug (see screenshot), but I found more interesting stuff.

Thread. pic.twitter.com/38fY2XHLlL

— Nemo (@captn3m0) July 31, 2019

Later TrueCaller apologized for this bug and withdrew the update. The Company also de-registered all users who were automatically signed-up for UPI.

Please Get in Touch with us if you face any trouble. Please Like, Comment and Share.

You can 'Follow Us'
@Facebook.
@Twitter.
@Instagram.
@Telegram (Try to open the link with Telegram app).