Data of around 25 lakh Bharti Airtel subscribers of the Jammu and Kashmir (J&K) circle, including Aadhaar numbers, addresses, and dates of birth, has reportedly been leaked by hackers, even as the telecom operator denied any breach in its servers.
A sample of the leaked database was shared on Twitter by cybersecurity researcher Rajshekhar Rajaharia which shows the subscribers’ masked details.
Rajaharia also shared a video of an email conversation between Bharti Airtel and the hackers named ‘Red Rabbit Team.’
The video shows that the hackers informed Bharti Airtel about the breach in December and demanded money.
“Hackers have claimed that they have access to pan-India data of Airtel subscribers, and they only uploaded a sample of subscribers data from J&K.
“It may be possible that the hacker may have uploaded a shell (malicious software code) in Airtel servers. During the COVID-19 peak period, several companies could not focus on security, and their data was breached,” Rajaharia said.
The hackers also uploaded the subscriber data on a website, but it was not accessible later.
When contacted, a Bharti Airtel spokesperson denied any breach of the company’s servers.
“Airtel takes great pride in deploying various measures to safeguard the privacy of its customers. In this specific case, we confirm that there is no data breach at our end.
“In fact, the claims made by this group reveal glaring inaccuracies, and a large proportion of the data records do not even belong to Airtel. We have already apprised the relevant authorities of the matter,” the spokesperson said.