Dunzo Discloses Data Breach That Exposed User Details

A Dunzo spokesperson said that the issue had been addressed and resolved for all users now.

Dunzo Discloses Data Breach That Exposed User Details

Dunzo said the data breach exposed phone numbers and email address of its users

  • Dunzo claimed no financial details were leaked through the issue
  • The company said a server of one of its partners was compromised
  • Dunzo enables online delivery from nearby shops in eight Indian cities

Google-backed delivery services startup Dunzo on Saturday revealed that it had identified a data breach impacting one of its customer databases. The firm said that hackers gained unauthorised access to the database that contained the phone numbers and email addresses of its users. The exact number of users compromised by the attack wasn't provided by Dunzo. However, it underlined that no payment information including credit card numbers was exposed due to the breach. The tech team at Dunzo also rotated all its access tokens and updated all passwords as a precaution to mitigate further issues.

A Dunzo spokesperson told Gadgets 360 that the issue had been addressed and resolved for all its users. “Our investigation so far suggests that the servers of a third party we work with was compromised, leading to bypassing of our security measures and a breach of our database,” the spokesperson said.

Dunzo didn't reveal any details about the third party whose servers are said to be compromised.

Earlier on Saturday, Dunzo CTO Mukund Jha published a post on Medium to reveal the data breach development. He said that his tech team took “swift action” to patch the security loophole and “added additional layers of security protocols” to address the issue.

Dunzo updated passwords, tightened infrastructure security, and closed all the vulnerable ports, Jha noted in his post. Also, it is claimed to have enhanced the existing logging and tracing mechanism to monitor and receive alerts about any suspicious activity in the future.

“While our best teams are working on resolving and strengthening our security efforts, we're also engaged with leading cybersecurity firms and experts to further strengthen our efforts,” Jha said.

Duzo offers online delivery for food, groceries, and medicines from nearby shops in eight cities across India, namely Bengaluru, Chennai, Delhi, Gurugram, Hyderabad, Jaipur, Mumbai, and Pune. It recently started facing tough competition from Uber and Swiggy as both recently launched their package delivery service in the country. Nevertheless, the coronavirus pandemic is helping Dunzo — alongside its competitors — bring new customers on board as a large number of people are staying indoors.

In 2020, will WhatsApp get the killer feature that every Indian is waiting for? We discussed this on Orbital, our weekly technology podcast, which you can subscribe to via Apple Podcasts or RSS, download the episode, or just hit the play button below.


For the latest tech news and reviews, follow Gadgets 360 on Twitter, Facebook, and Google News. For the latest videos on gadgets and tech, subscribe to our YouTube channel.

Jagmeet Singh
Jagmeet Singh writes about consumer technology for Gadgets 360, out of New Delhi. Jagmeet is a principal correspondent for Gadgets 360, and has frequently written about apps, computer security, Internet services, and telecom developments. Jagmeet is available on Twitter at @JagmeetS13 or Email at jagmeets@ndtv.com. Please send in your leads and tips. More
The Quest to Find Signs of Ancient Life on Mars
Redmi Note 7 Android 10-Based MIUI Update Starts Rolling Out in India for Some Users
Share on Facebook Tweet Snapchat Share Reddit Comment



© Copyright Red Pixels Ventures Limited 2022. All rights reserved.