bOat Data Leak: ShopifyGUY sails away with customer information

A significant security incident has been reported involving the unauthorized disclosure of sensitive customer data from boAt Lifestyle, a prominent Indian electronics firm known for its audio equipment and smartwatches.

The security incident may have compromised the personal information of over 7.5 million of its customers.

On 5th of April, an individual using the nickname ShopifyGUY took to the Internet to announce their involvement in the security breach at boAt Lifestyle.

It is estimated that the compromised data, which includes personal details like names, addresses, phone numbers, email addresses, and unique customer identifiers, amounts to roughly 2GB and has been detected on an obscure internet forum.

The data is now allegedly being offered for sale in the shadowy corners of the internet.

boAt Lifestyle is actively investigating the data breach.

Over the last couple of months other well-known Indian enterprises have also experienced cybersecurity breaches.

For instance, Motilal Oswal (MOSL), a significant player in the brokerage sector with a client base exceeding 6 million, was targeted by cybercriminals. Polycab, the largest manufacturer of wires and cables in India was also attacked.

MOSL and Polycab fell prey to the LockBit cyber extortionist group.

Additionally, Bira 91, a well-known Indian craft beer label, fell victim to the BianLian cyber extortionist group.

LockBit has emerged as a significant ransomware strain worldwide since 2022. The group, believed to be associated with Russia, has targeted a range of technology firms, including the Taiwanese semiconductor company TSMC, the global professional services company Accenture, and the electronics manufacturer Foxconn. In the year prior, LockBit also launched cyberattacks against Granules India, an Indian pharmaceutical firm, and the government-run National Aerospace Laboratories.