Supply chain β›“ Supply Chain

TrueCaller Third-Party Breach (May 2020)

πŸ“… 2020-05-01 🏒 Not disclosed
Primary Source β†—

Incident Details

TrueCaller Data of 4.75 Cr Indians for Sale On Dark Web: Report. Online intelligence firm Cyble flagged that a cybercriminal was selling Truecaller records of 4.75 crore Indians on the dark web for just about Rs 75,000, the Swedish caller identification app has denied any breach of its database. After an online intelligence firm Cyble flagged that a cybercriminal was selling Truecaller records of 4.75 crore Indians on the dark web for just about Rs 75,000, the Swedish caller identification app on Wednesday denied any breach of its database. As per Cyble, the data on sale includes information like phone numbers, city, gender, Facebook ID, and even mobile network.

Technical Details

Initial Attack Vector
Compromise of third-party service provider / vendor relationship
Vendor / Product
Not disclosed
Supply Chain Attack
βœ… Confirmed third-party / vendor compromise

Timeline

  1. 2020-05-01 Breach occurred
  2. 2020-05-29 Publicly disclosed