Zomato says hacker agrees to destroy 17 million user details, taken off dark web marketplace
After the massive data leakage of confidential records of 17 million users, Zomato would have worked with the pirate to fill the gaps in his security system.
In a blog entry on the company’s website, the “ethical hacker” – whose identity has been preserved – simply wanted to expose security vulnerabilities in the corporate structure. In addition, the hacker would have given the company’s data on how hacking was done, which Zomato will soon reveal to the public.
“The attacker was very cooperative with us … his main request was that we carried a healthy cattle bonus program for security researchers,” said the blog, which the company has accessed off in exchange for all copies of stolen data In the dark web market and destroy it.
Read also: Zomato hacked: the breach of security resulting in 17 million stolen user data
According to Zomato’s blog post, the company will present a Hackerone error reward program. The bond market was used to sell the data on the dark web is no longer available according to the blog. “We look forward to working more closely with the ethical hacking community to make Zomato a safer place for our users,” he said.
Approximately 6.6 million users had hashes passwords in the data released, according to the blog. “Were viewed at only 5 data points – user IDs, names, usernames, email addresses and hashed password with salt. No more data has been exposed to anyone.