Cyberattackers have stolen the personal details of millions of users of Indian online grocer BigBasket, according to Bloomberg News.
BigBasket co-founder and chief executive Hari Menon confirmed the attack, which included stolen data of sensitive information such as email IDs, mobile phone numbers and full addresses.
Writing in a blog post, cybersecurity researcher Cyble Inc. has reported that the stolen data has been put up for sale on the dark web for more than $40,000.
“There’s been a data breach and we’ve filed a case with the cybercrime police,” Menon told Bloomberg News.
Due to the ongoing investigation, Menon did not confirm the scale of the attack.
“The investigators have asked us not to reveal any details as it might hamper the probe,” he added.
With many consumers now turning to online shopping for every day items in the wake of coronavirus, cybercriminals are capitalising on the shift to ecommerce platforms.
BigBasket counts Alibaba as its biggest shareholder.
Just last month the Chinese retail giant saw its Lazada business announce a data breach at its grocery delivery business in Singapore.