emfizz.com
emfizz.com June 23, 2017


17 million user records stolen from restaurant guide Zomato

19 May 2017, 12:26 | Bernard Bryant

Zomato hacked in latest global cyberattack, data of 17mn users stolen

Zomato hacked in latest global cyberattack data of 17mn users stolen

The food discovery and delivery major also said that the hacker disclosed how he got access to this database.

The company also acknowledged that 5 points of data were stolen including user IDs, Names, Usernames, Email addresses, and Password Hashes with salt. The hacker who could get into it and steal the data had put up the data for sale in the dark web marketplace.

According to information shared on Hackeread.com, a user by the name of "nclay" claimed to have hacked Zomato. "He/she wanted us to acknowledge security vulnerabilities in our system and work with the ethical hacker community to plug the gaps", Zomato wrote in the blog post.

And with that assurance, the hacker agreed to destroy all copies of the stolen data and take the data off the dark web marketplace.

Further, so that others can learn from Zomato's mistakes, it will be posting this information on its blog once it fixes the loopholes.

"The database includes emails and password hashes of registered Zomato users while the price set for the whole package is Dollars 1,001.43 (BTC 0.5587)".

Deputy AG to brief Senate on Mueller nod; Trump unhappy with move
And finally, on Wednesday, Rosenstein appointed a special counsel, former FBI Director Robert Mueller, to lead the investigation. Yet there's no question that Comey's firing at least temporarily hobbled Rosenstein's public standing.


Central US warned severe weather, tornadoes on the horizon
The main threat from these storms is very large hail in the afternoon and evening and then strong winds after dark and overnight. Shards of glass were flying at them like bullets, Tyson said: "When your house comes apart like that, there's no place to go.


John Gibson: John Gibson gives up 3 goals in GM 1 loss
It was Silfverberg's 14th career playoff goal, tying him with Paul Kariya for fourth place on the all-time franchise list. He stopped 26 of 28 shots over the previous three hours - and 120 of 127 in the last three games - but it wasn't enough.


MediaNama has written to Zomato to confirm whether it used the outdated MD5 algorithm, and whether it stored salt values on the same server as the passwords. However, independent sources including the motherboard state that the password was converted into text easily enough.

The hacker requested the company to run a healthy bug bounty program for security researchers. Nonetheless Zomato has asked all users to change passwords for any other services where they used the same password.

Important note - payment related information on Zomato is stored separately from this (stolen) data in a highly secure PCI Data Security Standard (DSS) compliant vault.

"The hashed password can not be converted/decrypted back to plain text - so the sanctity of password is intact in case users' use the same password for other services", it said. Affected users have been logged out of the website and the app. HackRead, a security blog and news website, found the stolen Zomato database of 17 million users for sale on what is called the "dark web". This can be described as a portion of the content available on the World Wide Web, away from the public internet.

Zomato said that no money has passed hands and that it has been in communication with the hacker. "Should an end user face any lossdamage due to data breach, they can sue Zomato and seek compensation".



Other News

Trending Now

Poll boost for Jeremy Corbyn as Labour slashes Tory general election lead
Labour has vowed to uphold Gibraltar's British sovereignty and protect its economy if it wins the UK's June 8 general election. One of Jeremy Corbyn's key allies, Unite boss Len McCluskey, has said he can not see Labour winning the election.

Bills rookie receiver Jones sidelined with sprained knee
While Watkins is expected to be ready for training camp when it begins on July 30, Jones' "week-to-week" prognosis is open-ended. The East Carolina product is slated to rehab throughout the upcoming week with an opportunity to return at next Thursday's OTA.

Possible Showers Tonight, Gusty Thursday
An approaching cold front will bring a chance for a few showers and storms during the late afternoon and evening. WEDNESDAY: Mostly cloudy skies and scattered rain showers will be possible, with a high of 67 degrees.

Champions League spot up for grabs on final day
United's pre-season tour of the U.S. also features games against the LA Galaxy, Real Salt Lake, Barcelona and Real Madrid. West Brom's approach was obvious early on as they sat back and invited City to try and break them down.

Protester killed, AP journalist wounded in West Bank clash
President Trump said he will reaffirm the U.S.'s "unbreakable alliance with the Jewish state" while in Israel. The Palestinians seek the West Bank and Gaza for a future state, with east Jerusalem as their capital.

Brazil's president denies authorizing payments to silence politician
Temer has acknowledged meeting with the executive who is the alleged source of the recordings, meatpacking tycoon Joesley Batista. Temer late Wednesday denied a report that he endorsed the idea of bribing a now jailed former congressman to keep him quiet.

Cyber attack: NHS Tayside returns to normal
Jersey's government is reassuring islanders that all of their departments remain safe, after a global cyber attack halted the NHS. Experts and governments alike warn against ceding to the demands and Wainwright said few victims so far had been paying up.

Three adjustments Penguins need prior to Game 2
Hornqvist hit post to start the power play but from there the Senators did a good job limiting Pittsburghs chances on Anderson. The NHL playoff game between the Pittsburgh Penguins and Ottawa Senators will be broadcast on the NBC and CBC in Canada.

Tulsa Police Officer Found Not Guilty In Terrance Crutcher's Death
Anyone who spends time with children can tell you that kids are always watching adults to gauge how best to understand the world. At that rally, Crutcher's family called for one concrete change: For city leadership to block Shelby from returning to her job.

Oil on longest rising streak in more than a month
West Texas Intermediate crude June contract ticked up 27 cents, or around 0.6%, to $49.12 a barrel by 8:55AM ET (12:55GMT).