Dunzo data breach leaks personal information of over 3 million users

Bengaluru-based delivery player Dunzo has reported data breach where personal informations of users were leaked.

The information leaked through the data breach has now been uploaded on haveibeenpwned.com, a website which is used by security researchers to help the public find whether their data had been part of any breaches.

Through this upload, the website details 3,465,259 accounts of Dunzo users.

The data leaked includes; email IDs, phone numbers, last known location, phone type and login dates. “No payment information like credit card numbers was compromised as we don’t store this data on our servers,” shared Mukund Jha, CTO, Dunzo who added that their internal investigation suggests that servers of a third party that Dunzo works with were compromised.

The total number of breached accounts wasn’t disclosed by Dunzo in its voluntary disclosure earlier.

Internal information from Dunzo, which includes the company’s advertiser ID, internal campaign names, keywords and more were also leaked through the hack. “Our teams are additionally working with two external leading cyber security firms to further strengthen all our security practices. This will help ensure that in the future, there is no thread of any unauthorized access to our data," added Jha.