emfizz.com
emfizz.com August 21, 2017


17 million user records stolen from restaurant guide Zomato

19 May 2017, 12:26 | Bernard Bryant

17 million user records stolen from restaurant guide Zomato

17 million user records stolen from restaurant guide Zomato

The food discovery and delivery major also said that the hacker disclosed how he got access to this database.

The company also acknowledged that 5 points of data were stolen including user IDs, Names, Usernames, Email addresses, and Password Hashes with salt. The hacker who could get into it and steal the data had put up the data for sale in the dark web marketplace.

According to information shared on Hackeread.com, a user by the name of "nclay" claimed to have hacked Zomato. "He/she wanted us to acknowledge security vulnerabilities in our system and work with the ethical hacker community to plug the gaps", Zomato wrote in the blog post.

And with that assurance, the hacker agreed to destroy all copies of the stolen data and take the data off the dark web marketplace.

Further, so that others can learn from Zomato's mistakes, it will be posting this information on its blog once it fixes the loopholes.

"The database includes emails and password hashes of registered Zomato users while the price set for the whole package is Dollars 1,001.43 (BTC 0.5587)".

Celtics outlast Wizards in Game 7 for right to play Cavs
Al Horford and Amir Johnson were the starting big men of the game, leaving Olynyk to come in for Johnson during the game. The Golden State Warriors defeated the San Antonio Spurs in Game 1, and Game 2 is set for Tuesday night at Oracle Arena.


Jamie Redknapp sends blunt message to Man United boss Jose Mourinho
Sam Allardyce's Crystal Palace visit Old Trafford for Sunday's finale, three days before United play a Europa League final in Stockholm against Ajax.


Johansen and Kesler take spotlight in Western Conference Final
Zolnierczyk has appeared in seven of the Predators' first 12 playoff games and scored a goal in the first round against Chicago. In a game billed as the biggest postseason game ever played in the city of Nashville , the Predators were not to be denied.


MediaNama has written to Zomato to confirm whether it used the outdated MD5 algorithm, and whether it stored salt values on the same server as the passwords. However, independent sources including the motherboard state that the password was converted into text easily enough.

The hacker requested the company to run a healthy bug bounty program for security researchers. Nonetheless Zomato has asked all users to change passwords for any other services where they used the same password.

Important note - payment related information on Zomato is stored separately from this (stolen) data in a highly secure PCI Data Security Standard (DSS) compliant vault.

"The hashed password can not be converted/decrypted back to plain text - so the sanctity of password is intact in case users' use the same password for other services", it said. Affected users have been logged out of the website and the app. HackRead, a security blog and news website, found the stolen Zomato database of 17 million users for sale on what is called the "dark web". This can be described as a portion of the content available on the World Wide Web, away from the public internet.

Zomato said that no money has passed hands and that it has been in communication with the hacker. "Should an end user face any lossdamage due to data breach, they can sue Zomato and seek compensation".



Other News

Trending Now

Senators: Deputy AG knew of Comey firing before writing memo
Trump later said he had already made a decision to dismiss him and was thinking of "this Russian Federation thing". Among the things being investigated are possible links between Trump campaign associates and the Kremlin.

Democrats seek say, but Trump controls Federal Bureau of Investigation pick
That means this investigation is going to continue, unless a concerted conspiracy to obstruct justice is afoot. Briefly during the presidential transition, Trump aides had discussed moving press out of the briefing room.

Trump team knew about Flynn probe before hiring him
The Kentucky Republican had said initially that investigations by the Senate intelligence panel and the FBI were sufficient. King says, "I'm anxious with all special counsels because there's no control over them and they can abuse their power".

Cyber attack: NHS Tayside returns to normal
Jersey's government is reassuring islanders that all of their departments remain safe, after a global cyber attack halted the NHS. Experts and governments alike warn against ceding to the demands and Wainwright said few victims so far had been paying up.

Saudi Arabia gears up for summit-packed weekend
Women in Saudi Arabia , including foreign visitors, are typically expected to wear a floor length dress - abaya, and a head scarf. The concert will coincide with President Donald Trump's first overseas visit since taking office, the Associated Press reports.

Tulsa Police Officer Found Not Guilty In Terrance Crutcher's Death
Anyone who spends time with children can tell you that kids are always watching adults to gauge how best to understand the world. At that rally, Crutcher's family called for one concrete change: For city leadership to block Shelby from returning to her job.

Bills rookie receiver Jones sidelined with sprained knee
While Watkins is expected to be ready for training camp when it begins on July 30, Jones' "week-to-week" prognosis is open-ended. The East Carolina product is slated to rehab throughout the upcoming week with an opportunity to return at next Thursday's OTA.

Comey Memo Has Trump White House in Tailspin
Trump on Thursday also defended his Comey decision and took aim at the former bureau boss' credibility and popularity. Trump later said in an interview with NBC News he was going to fire Comey regardless of Rosenstein's recommendation.

Trump Knew Flynn Was Under Investigation for Turkey Lobbying, Still Hired Him
The Senate intelligence committee on Wednesday asked Comey to appear before the panel in both open and closed sessions. Striking a defiant stance, he added: "You can't let the critics and the naysayers get in the way of your dreams".

Wizards vs Celtics Game 7 Preview
Washington stayed close as Beal continued to score, including a four-point play. "End of the third quarter was big for us". This improbable run will also put Boston's star, Isaiah Thomas, in the conversation with some of the greats before him.