A hacker group called ‘TeamUnknown’ has claimed to have breached the App-based taxi company, Ola. They posted on the social networking site Reddit saying that they have access to all the User Details including credit numbers and unused vouchers.
TeamUnknown suggested that they did it to show the poor application design and that their development server was weakly configured. The hackers also claimed to email Ola about the breach but they did not respond so far.
They also posted three screenshots showing Ola employees email IDs and voucher details.
Here’s the full post from TeamUnknown
"Their Application design is very poor and their development server is weakly configured. The hack was a little tricky and involved many steps to get to the database. Once we got to the database it was like winning a lottery. It had all the user details along with credit card transaction history and unused vouchers. The voucher codes are not even out yet. Its obvious that we wont be using credit card details and voucher codes. We dropped them a mail but no response from their side as of now. You can see the snapshots in the links given below. I am sure OLA might be having a security team of their own. Not that good it seems ;)"
Ola denied that neither their database was hacked nor they received any email about it. However, Ola did admit that their staging servers were breached which has dummy characters and no vital information was present.
Here’s the full statement of Ola
"There has been no security lapse, whatsoever to any user data. The alleged hack seems to have been performed on a staging environment when exposed for one of our test runs. The staging environment is on a completely different network compared to our production environment, and only has dummy user values exclusively used for internal testing purposes. We confirm that there has been no attempt by the hackers to reach out to us in this regard. Security and privacy of customer data is paramount to us at Ola."