Security companies, Seqrite’s Cyber Intelligence Labs and seQtree InfoServices discovered an advertisement on a darknet forum that provides access to a dumped database that belonged to India’s National Internet Registry.
The data breach impacted more than 6,000 internet service providers, government entities, and private companies.
Teams from the two security companies tracked down what information and the threat.
The advertisement is as below:
They discovered that in addition to having access to IRINN (Indian Registry for Internet Names and Numbers: responsible for coordinating IP Address allocation with other internet resource management function at national level in the country) and APNIC databases, the hackers have accessed documents uploaded by IRINN users.
The screenshots provided by the hacker revealed that he can access login details.
Some of the affected include the Unique Identification Authority of India, Defense Research and Development Organization, Idea Telecom, Mastercard/Visa, State Bank of India, among many others.
The teams reached out to IRINN and the breach was acknowledged, but they have not made a notice available to the public.
