BigBasket controversies
Controversies tied to this brand in public sources. A listing is not a finding of fault.
Back to profile2 entries
2020
BigBasket user-data breach
Issue disclosure
In October 2020, BigBasket suffered a data breach reportedly affecting more than 20 million users. The exposed information was reported to include names, telephone numbers, email addresses, physical and IP addresses, dates of birth, and passwords. The incident raised concerns about the protection of personal and delivery-related information held by online grocery platforms.
Cyble reported that data allegedly belonging to Bigbasket was exposed and offered for sale. The article says the breach occurred on October 30, 2020, and Bigbasket said it was evaluating the extent and authenticity of the claim with cybersecurity experts.
Company response
Investigation — Bigbasket
they are evaluating the extent of the breach and authenticity of the claim in consultation with cybersecurity experts and finding immediate ways to contain it.
Source excerpt
The company has filed a police complaint in this regard with Cyber Crime Cell in Bengaluru and is verifying claims made by cyber experts.
In the course of our routine dark web monitoring, the research team at Cyble found the database of Big Basket for sale in a cyber crime market, being sold for over USD 40,000.
Bigbasket has faced a potential data breach which could have leaked details of its around 2 crore users, according to cyber intelligence firm Cyble.
2020
BigBasket discloses potential customer data breach
Issue disclosure
BigBasket stated that it had learned of a potential data breach and was evaluating the extent of the incident and the authenticity of the claims. Cyble reported that data allegedly belonging to BigBasket users had been offered for sale. The reported breach date varies across sources. The company's statement did not confirm the scope of the incident or the validity of the data offered for sale.
BigBasket said it had learned of a potential data breach and was evaluating its extent and the authenticity of the claims. Cyble reported that data allegedly belonging to BigBasket users had been offered for sale; the reported breach date varies across sources.
Company response
Investigation — Bigbasket
The company has filed a police complaint in this regard with Cyber Crime Cell in Bengaluru and is verifying claims made by cyber experts.
Source excerpt
A few days ago, we learnt about a potential data breach at Bigbasket and are evaluating the extent of the breach and authenticity of the claim in consultation with cybersecurity experts and finding immediate ways to contain it.
Grocery e-commerce platform Bigbasket has faced a potential data breach which could have leaked details of its around 2 crore users, according to cyber intelligence firm Cyble.
Cyble claimed that the breach occurred on October 30, 2020 and it has already informed the management of Bigbasket about it.