Reliance Jio. | Reuters File Photo
In what seemed to be the biggest data breach in India, a nondescript website called magicapk reportedly had access to data of over 120 million Reliance Jio users. The website gave out details like first name, last name, mobile number, email-id, circle, SIM Activation Date and even Aadhaar Number.
Interestingly, Reliance Jio was one of the few telecom operators to use Adhar ID for sim activation.
Notably, Reliance Jio hit 100 million customer base in February 2017. If the data breach affected all of it's customer base then it might possibly the biggest data breach in India.
Fonearena.com, a tech website, was the first one to report this massive data breach. The editor of Fonearena Varun Krish told indianexpress.com that they were in real shock to find that his and his some of his employees' personal details like were given out by the website http://magicapk.com upon entering the numbers in the search box.
The website had shown Aadhar and email details of three of the numbers, though the rest of the numbers they tried were not giving out details of the customers, said Varun to indianexpress.com.
Apparently, the website was giving out details of numbers as late as July. According to fonearena.com, those who got the Jio sim card during the preview offer were most affected.
NDTV Gadgets 360 had contacted Reliance Jio for its comments on the huge security breach that
Fonearena.com had reported, questioning Reliance's customer security and Jio's spokesperson responded stating that the issue is being investigated and customer details cannot be shared without their consent. Also, the spokesperson claimed that the data provided by Fonarena.com to be unauthentic.
Around 11.40 pm, with more queries coming in, the site seemed to have gone offline, and around 12.45 the site had been suspended completely.
When NewIndianExpress.com checked the website, it was no longer accessible as the account had been suspended.
Reports said that the site had been registered by domain provider godaddy.com on May 18, 2017 but provides no further details.
