A hacker claims to be selling millions of user records associated with Indian startup Shadowfax, which offers logistics services to e-commerce and hyperlocal platforms across the country.
The pseudonymous hacker said in a posting on a well-known cybercrime forum that they are selling the allegedly stolen Shadowfax data for an undisclosed amount. Some of the data published in the listing claims to include mobile phone numbers, order delivery and receipt statuses, and tracking identifiers of users who received orders or processed pickups through the platform.
The hacker said the breach occurred in November, which led to the compromise of five million users’ information.
It is unclear whether the data was obtained directly from Shadowfax servers directly or as part of an existing breach incident.
TechCrunch verified some of the published data by passing tracking IDs Shadowfax Order Tracking, which returned valid tracking information at the time we checked. TechCrunch shared some of the allegedly stolen data with Shadowfax co-founder and CTO Vaibhav Khandelwal, who told TechCrunch before publication that the company is “still validating the data if it is our data and monitoring suspicious activity on our system,” and denied. to comment further.
Shortly after TechCrunch contacted Shadowfax, the tracking IDs TechCrunch used for verification started returning an error message saying the IDs were invalid.
Founded in 2015, Shadowfax bills itself as India’s largest on-demand third-party logistics platform and works with some of the largest e-commerce and hyperlocal food delivery companies in the country, including online grocery giant BigBasket. Zomato’s e-commerce platform, Blinkit. and Flipkart’s fashion portal Myntra. The company also works with brands such as Decathlon, Domino’s and Procter & Gamble.
Shadowfax processes more than 1.5 million orders daily using a fleet size of over three million riders across more than 2,500 cities in India, according to the company’s website.
The Bengaluru-based startup, which counts Flipkart, Eight Roads Ventures and TPG NewQuest among its investors, has raised a total of $181 million, including its most recent Series D round of $60 million earlier this year.
Read more at TechCrunch:
