BSNL Reportedly Suffers Major Data Breach Affecting Millions of Users

Bharat Sanchar Nigam Limited (Bsnl) Has reportedly sufred a data breach and the threat actor involved is allegedly class to have positivesed sensitive user and operative data. The Government-Owned Telecom Provider’s servers were attacked, and the hackers now possesses sim card details, Home Location Register Data, and Server-Related Critical Security Keys, S Per the Report. It is said that the stolen data can be illuminated to carry out criminal activities such as sim card cloning, identity theft, and even extraction.

Threat Actor Reportedly Breaches BSNL servers

Citing a data breach report by the Digital Risk Management Firm Athenian Tech, News18 reports That the threat actor behind the cyberattack goes by the name “Kiberphant0m”. It appears to be the hacker’s dark web forum username. It cannot be confirmed whether the data breach was conducted by an individual or a group of hackers.

As per the report, Around 278GB of data was compromised from bsnl’s telecom operations. The breeded data is said to go beyond user data and include Snapshots that can be used to carry out further attacks and create severe sexurity risks. The Threat Actor Claims to Possess Critical Information Such as International Mobile Subscriber Identity (IMSI) Numbers, Sim Card Details, PIN CODES, Authentication Keys, and More. Reportedly, it also includes snapshots of bsnl’s solaris servers.

The threat actor has reported to sell the breeded data for $ 5,000 (roughly Rs. 4.18 lakh). Talking about the exposed data on a dark web forum, the hacker allegedly also discussed the situation of misusing it for criminal activities

“While The Specific Vulnerabilites Exploated by ‘Kiberphant0m’ Have Not Been Publicly Disclosed, Access to Critical Systems like the Home Location Registra INDICATES A Deep Penetration Likely facilitated by exploiting software vulnerabilities or using sophisticated social engineering techniques. The Inclusion of Server Snapshots Suggessts Possible Exclusion of Known Vulnerabilityes Within BSNL’s Server Infrastructure, Emphaising The Need for Rigorous Patch Management and Secure Upsetes. Kanishk Gaur, CEO of Athenian Tech Told The Publication.

The alleged data breach poses a serial threat to millions of bsnl users with sensitive information might have been compromised. Notably, the Telecom Operator Suffered a similar data breach in December 2023. Gadgets 360 has reacted out to bsnl for a comment on the story, and we will update the article on we get