TAJ Group Comprimised: 1.5 Million Datasets leaked

11/25/2023Cybercrime

Names, addresses, membership IDs, dates, phone numbers, DOBs, and personally identifiable information (PII) are among the data that have been compromised.

There is a significant setback for Taj Hotels. The group’s 1.5 million visitors’ personal information and data have been compromised. The dark web marketplace BreachForums is offering this data for $5,000 each set.

Names, addresses, membership IDs, dates, phone numbers, DOBs, and personally identifiable information (PII) are among the data that have been compromised.

“We have been made aware of someone claiming possession of a limited customer data set which is of a non-sensitive nature,” an IHCL spokesperson said. We place the utmost priority on the safety and security of our clients’ data. We have alerted the appropriate authorities and are looking into this claim.

BreachForums is notorious for hosting these illegal data sales and has already been taken down twice. Threat actors are frequently thought to favor posting on the marketplace. “Dnacookies” is the threat actor that is selling data that was compromised from Taj.

The material on the dark net forum dates from 2014 to 2020, according to cybersecurity expert Sunny Nehra, who was quoted by CNBC-TV18. He stated, “Since the data is not new, there are multiple possibilities that could have led to this breach.”

It is plausible that Taj has not carried out a cyber security examination since 2020. Nevertheless, the threat actor is only now selling the data, Nehra added.