Supply chain
β Supply Chain
TrueCaller Third-Party Breach (May 2020)
Primary Source βIncident Details
TrueCaller Data of 4.75 Cr Indians for Sale On Dark Web: Report. Online intelligence firm Cyble flagged that a cybercriminal was selling Truecaller records of 4.75 crore Indians on the dark web for just about Rs 75,000, the Swedish caller identification app has denied any breach of its database. After an online intelligence firm Cyble flagged that a cybercriminal was selling Truecaller records of 4.75 crore Indians on the dark web for just about Rs 75,000, the Swedish caller identification app on Wednesday denied any breach of its database. As per Cyble, the data on sale includes information like phone numbers, city, gender, Facebook ID, and even mobile network.
Technical Details
- Initial Attack Vector
- Compromise of third-party service provider / vendor relationship
- Vendor / Product
- Not disclosed
- Supply Chain Attack
- β Confirmed third-party / vendor compromise
Timeline
- 2020-05-01 Breach occurred
- 2020-05-29 Publicly disclosed