Chrome, Firefox browser extensions leaked millions of users' data

Agencies
July 20, 2019

Popular browser extensions like ad blockers have been caught harvesting personal data of millions of consumers who use Chrome and Firefox -- not only their browsing histories but also exposing tax returns, medical records, credit card information and other sensitive data in the public domain.

According to an independent cyber security researcher Sam Jadali, the data has been leaked to a fee-based company called Nacho Analytics that gives unlimited access to any websites analytics data.

The data could be purchased for as little as $10 to $50, said Jadali whose report was first described in Ars Technica late on Friday.

"This non-stop flow of sensitive data over the past seven months has resulted in the publication of links to home and business surveillance videos hosted on Nest and other security services.

"Tax returns, billing invoices, business documents, and presentation slides posted to, or hosted on, Microsoft OneDrive, Intuit.com, and other online services" have been exposed, said the report.

The exposed data via eight browser extensions also include vehicle identification, numbers of recently bought automobiles, along with the names and addresses of the buyers.

Patient details, travel itineraries, Facebook Messenger attachments and Facebook photos, even private, are now available in the public domain.

Browser extensions - also known as plug-ins or add-ons - are apps that consumers can install to run alongside their browser for additional functionality.

The affected extensions were apps used by millions of people, including HoverZoom, SpeakIt!, and FairShare Unlock.

"The extensions have been remotely removed or disabled in consumers' browsers and are no longer available for download," said both Google and Firefox.

People who didn't download the extensions may also be affected.

"Nobody is immune to this. Even if you don't have any harmful extensions, the other people you interact with may have an extension on their computers that could be leaking the data you share with them," Jadali was quoted as saying.

Nacho Analytics, for example, promises to let people "see anyone's analytics account" and to provide "real-time web analytics for any website".

The company charges $49 per month, per domain, to monitor any of the top 5,000 most widely-trafficked websites.

The security expert has suggested users to delete all browser extensions they have installed in the past.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
News Network
December 4,2025

Udupi: A 40-year-old NRI from Udupi has reportedly lost more than Rs 12.25 lakh in an online investment scam operated through Telegram.

According to a complaint filed at the CEN police station, Leo Jerome Mendonsa, who has been working in Dubai for the past 15 years in computer accessories sales, maintains NRI accounts in Karkala and Nitte.

On November 12, 2025, Mendonsa was added to a Telegram group called Instaflow Earnings by unknown individuals. Users identified as Priya and Dipannita persuaded him to invest in “Revenue Tasks.” Initially, Mendonsa transferred Rs 1,100 multiple times and received the promised returns, encouraging him to continue.

On November 14, another user, Nishmitha Shetty, directed him to register on a website, digitvisionuoce.cc, and invest Rs 4 lakh in various shares. Over the next few days, he made multiple transfers totaling Rs 12,25,000, including Rs 50,000 via Google Pay, believing the scheme was legitimate.

After receiving the money, the alleged handlers stopped responding, and neither the invested amount nor the promised profits were returned.

The CEN police have registered a case under Sections 66(C) and 66(D) of the IT Act and Section 318(4) of the Bharatiya Nyaya Sanhita (BNS), and investigations are ongoing.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
News Network
November 22,2025

gaza.jpg

The Israeli regime’s forces have killed two Palestinian children in the Gaza Strip every day since the ceasefire began in early October, UNICEF has warned.

The UN children’s agency said on Friday that Israeli forces continue to attack Palestinians in Gaza even though the agreement was meant to stop the killing.

“Since 11 October, while the ceasefire has been in effect, at least 67 children have been killed in conflict-related incidents in the Gaza Strip. Dozens more have been injured. That is an average of almost two children killed every day since the ceasefire took effect,” UNICEF spokesperson Ricardo Pires said in Geneva, reminding that each number in the statistics represents a child whose life had ended violently.

“These are not statistics,” he said. “Each child had a story, a family, and a future that was stolen from them.”

Data from Palestinian factions, human rights groups, and government bodies recorded since the US-brokered ceasefire deal went into effect on October 10 show that Israeli forces have carried out numerous attacks, each constituting a separate ceasefire violation.

UNICEF teams say they repeatedly continue to witness heart-wrenching scenes of fearful Palestinian children sleeping outdoors with amputated limbs, while others live as orphans in flooded, makeshift shelters.

“I saw this myself in August. There is no safe place for them. The world cannot normalize their suffering,” Pires said, lamenting that the UN could “do a lot more if the aid that is really needed was entering faster.”

The UNICEF spokesperson warned that with the advent of winter, the risks for hundreds of thousands of displaced children will increase.

He warned, “The stakes are incredibly high” for children as winter acts as a threat multiplier, where children have no heating, no insulation, and few blankets. He said respiratory infections rise.

“Too many children have already paid the highest price,” Pires said. “Too many are still paying it, even under a ceasefire. The world promised them it would stop and that we would protect them.”

“Now we must act like it,” the UNICEF spokesperson added.

Since the Israeli regime launched its genocidal war against Palestinians in Gaza in October 2023, it has killed nearly 70,000 people in the territory, most of them women and children, and injured over 170,000 more, while reducing most of the structures in the enclave to rubble.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
News Network
December 4,2025

indigocrisis.jpg

Angry outbursts, long queues, and desperate appeals filled airports across India today as IndiGo grappled with a severe operational breakdown. Hundreds of flights have been cancelled or delayed, leaving thousands of passengers stranded through the night and forcing many to spend long hours at helpdesks.

Social media was flooded with videos of fliers pleading for assistance, accusing the airline of misleading updates, and demanding accommodation after being stuck for 10 to 12 hours at airports such as Hyderabad and Bengaluru.

What Triggered the Meltdown?

IndiGo has attributed the widespread disruption to “a multitude of unforeseen operational challenges.” These include:

•    Minor technology glitches
•    Winter-season schedule adjustments
•    Bad weather
•    Congestion in the aviation network
•    New crew rostering rules (Flight Duty Time Limitations or FDTL)

Among these, the most disruptive has been the implementation of the updated FDTL norms introduced by the Directorate General of Civil Aviation (DGCA) in January 2024.

These rules were designed to reduce pilot fatigue and improve passenger safety. Key changes include:

•    Longer weekly rest periods for flight crew
•    A revised definition of “night,” extending it by an extra hour
•    Tighter caps on flight duty timing and night landings
•    Cutting night shifts for pilots and crew from six per roster cycle to just two

Once these norms became fully enforceable, airlines were required to overhaul rosters well in advance. For IndiGo, this triggered a sudden shortage of crew available for duty, leading to cascading delays and cancellations.

Why IndiGo Was Hit the Hardest

IndiGo is India’s largest airline by a wide margin, operating over 2,200 flights daily. That’s roughly double the number operated by Air India.

When an airline of this size experiences even a 10–20% disruption, it translates to 200–400 flights being delayed or grounded — producing massive spillover effects across the country.

IndiGo also relies heavily on high-frequency overnight operations, a model typical of low-cost carriers that aim to maximise aircraft utilisation and reduce downtime. The stricter FDTL norms clash with these overnight-heavy schedules, forcing the airline to pull back services.

Aviation bodies have also criticised IndiGo’s preparedness. The Airline Pilots' Association of India (ALPA) said airlines were given a two-year window to plan for the new rules but “started preparing rather late.” IndiGo, it said, failed to rebuild crew rosters 15 days in advance as required.

The Federation of Indian Pilots (FIP) went further, calling the crisis the result of IndiGo’s “prolonged and unorthodox lean manpower strategy,” and alleging that the airline adopted a hiring freeze even as it knew the new rules would require more careful staffing.

How Many Flights Are Affected?

In the past 48 hours, over 300 flights have been cancelled. At least 100 more are expected to be cancelled today.

City-wise impact:

•    Hyderabad: 33 expected cancellations; several fliers stranded overnight
•    Bengaluru: over 70 expected cancellations
•    Delhi, Mumbai, Chennai, Kolkata: widespread delays and missed connections

Passengers shared distressing accounts online.

One customer at Hyderabad airport said they waited from 6 PM to 9 AM with “no action taken” regarding their delayed Pune flight. Another said IndiGo repeatedly told them the crew was “arriving soon,” only for the delay to stretch over 12 hours.

IndiGo has apologised for the disruption and promised that operations will stabilise within 48 hours, adding that “calibrated adjustments” are being made to contain the chaos.

What Should Passengers Do Now?

For those flying in the next few days, especially with IndiGo, here are key precautions:

1. Keep Checking Flight Status
Monitor your flight closely before leaving for the airport, as delays may be announced last-minute.

2. Arrive Early
Expect long queues at counters and security due to crowding and rescheduling.

3. Carry Essentials
Pack snacks, water, basic medicines, chargers, and items for children or senior citizens. Extended waiting times should be anticipated.

4. Use Flexible Booking Options
If you booked tickets with a free-date-change or cancellation option, consider using them.
If you haven’t booked yet, prefer refundable or flexible fares, or even consider alternate airlines.

5. Follow IndiGo’s Updates
Keep an eye on IndiGo’s official social media channels and contact customer support for rebooking and refund queries.

What Needs to Change?

Pilot groups have raised concerns not just about staffing but also the planning practices behind it.
The Federation of Indian Pilots accused IndiGo of:

•    Imposing an unexplained hiring freeze despite knowing the FDTL changes were coming
•    Entering non-poaching agreements that limited talent movement
•    Keeping pilot pay frozen
•    Underestimating the need to restructure operations in advance

They have urged DGCA to approve seasonal schedules only after airlines prove they have adequate pilot strength under the new norms.

ALPA also warned that some airlines might be using the delays as an “immature pressure tactic” to push DGCA for relaxations in the new rules — which, if granted, could compromise the very safety standards the norms were meant to protect.

Both pilot bodies stressed that no exemption should dilute safety, and any deviations should be based solely on scientific risk assessment.

Is a Solution in Sight?

While IndiGo says normalcy will return within two days, aviation experts believe that fully stabilising operations could take longer, depending on how quickly the airline can:
•    Re-align rosters
•    Mobilise rested crew
•    Boost staffing
•    Adjust its winter schedule to match regulatory requirements
Passengers are advised to remain prepared for continued delays over the next few days as the airline works through its backlog. 

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.