Yatra’s voyage to dark web

Yatra Online Pvt Ltd based in Gurgaon India, is one of India’s leading online travel companies and operates the website Yatra.com. The company provides information, pricing, availability, and booking facility for domestic and international air travel, domestic and international hotel bookings, holiday packages, buses, trains, in city activities, inter-city and point-to-point cabs, homestays and cruises. As a leading platform of accommodation options, Yatra provides real-time bookings for more than 83,000 hotels in India and over 800,000 hotels around the world.

Launched in August 2006, Yatra was ranked the Most Trusted e-Commerce Travel Brand in India in the Economic Times Brand Equity Survey 2016 for the second successive year, and has won the award for ‘First Prize – Domestic Tour Operator (Rest of India)’ at the India Tourism Awards held in July 2016.

As many of us might have heard about this, Yatra.com faced a data breach in 2013, and the breach knowledge became public in 2018. However, the full/raw breached data remained “somewhat” private for a few years!

On May 30, Cyble researchers said that they have identified a credible actor in one of the darkweb markets who was selling the full (raw, SQL) database of Yatra.com few weeks ago.

5 M+ Indian Account details with all the above fields

” Considering the nature of this data leak (and that too at such a low price point), it is expected this will likely fall into the hands of various cybercrime gangs, who might use this information for various nefarious purposes including KYC scams, Identity Thefts, Banking Frauds etc. Accordingly, we recommend people to stay vigilant and maintain good cyber hygiene.” said Cyble.

Leave a comment