Bengaluru-based 'JusPay' refutes 10 cr card data breach claim, says only 3.5 cr users' info leaked

Agencies
January 6, 2021

Juspay.jpg

Bengaluru, Jan 6: Bengaluru-based digital payments gateway JusPay on Tuesday clarified that about 3.5 crore records with masked card data and card fingerprint were compromised by a hacker and the claim of 10 crore cardholders' data being affected is “incorrect". Responding to claims made by independent cyber security researcher Rajshekhar Rajaharia on Sunday that data of nearly 10 crore credit and debit card holders in the country is being sold for an undisclosed amount on the Dark Web -- leaked from a compromised server of Juspay, the company said in a fresh statement that none of its merchants and their customers are at any risk.

"The masked card data is used for display purposes on merchant UI and cannot be used for completing a transaction. A part of user metadata in our system which has non-anonymised, plain-text email IDs and phone numbers got compromised," the company informed.

"On August 18, 2020, an unauthorised attempt on our servers was detected and terminated when in progress," it added.

According to JusPay, no full card numbers, order information, card PINs and passwords were leaked.

"We conducted a thorough audit on the day of the incident which confirmed that our 'Secure Data Store' which hosts the 16-digit encrypted card numbers was not accessed and remains secure. The cyberattack was identified in an isolated/separate system," JusPay elaborated.

"We can confirm that the compromised data does not contain any transaction or order information, as the intrusion was terminated before such an access."

Rajaharia had told IANS that the data was being sold on the Dark Web for an undisclosed amount via cryptocurrency Bitcoin.

"For this data, hackers are also contacting via Telegram," he said, adding that if the hackers can find out the Hash algorithm used to generate the card fingerprint, they will be able to decrypt the masked card number.

"In this condition, all 10 crore cardholders are at risk," Rajaharia noted.

JusPay said that it has made significant investments in security and data governance and its policies are aligned to globally accepted data protection standards.

"We did identify gaps in some of the older access keys and moved them to non-access key-based authentication supported by hosting providers. We have also made two-factor authentication (2FA) mandatory for all the tools accessed by our teams," the company said.

According to Saurabh Sharma, Senior Security Researcher (GReAT), Kaspersky (APAC), data leaks due to internal vulnerabilities has become a common instance in India, especially in the last two years.

"Enterprises and institutions have begun to understand the importance of having a strong security framework to save themselves from an external attack by a cybercriminal. However, they tend to overlook the internal vulnerabilities that can prove to be very damaging to their reputation and business if exploited by the bad guys," Sharma told IANS.

Regular network and server evaluation, proactive detection of zero-day vulnerabilities and patching them immediately, launching attractive bug-bounty programmes and promptly informing the users of a potential leak are some of the "mandatory steps that large enterprises and institutions should follow in order to stay away from cybercriminals and save their reputation," he added.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
News Network
December 7,2025

SHRIMP.jpg

Mangaluru, Dec 7: A rare bamboo shrimp has been rediscovered on mainland India more than 70 years after it was last reported, confirming for the first time the presence of Atyopsis spinipes in the country. The find was made by researchers from the Centre for Climate Change Studies at Sathyabama Institute of Science and Technology, Chennai, during surveys in Karnataka and Odisha.

The team — shrimp expert Dr S Prakash, PhD scholar K Kunjulakshmi, and Mangaluru-based researcher Maclean Antony Santos — combined field surveys, ecological assessments and DNA analysis to identify the elusive species. Their findings, published in Zootaxa, resolve decades of taxonomic confusion stemming from a 1951 report that misidentified the species as Atyopsis moluccensis without strong evidence.

The shrimp has now been confirmed at two locations: the Mulki–Pavanje estuary near Mangaluru and the Kuakhai River in Bhubaneswar. Historical specimens from the Andaman Islands, previously labelled as A. moluccensis, were also found to be misidentified and actually belong to A. spinipes.

The rediscovery began after an aquarium hobbyist in Odisha spotted a shrimp in 2022, prompting systematic surveys across Udupi, Karwar and Mangaluru. Four female specimens were collected in Mulki and one in Odisha, all genetically matching.

Researchers warn the species may exist in very small, vulnerable populations as freshwater habitats face increasing pressure from pollution, sand mining and infrastructure development. All verified specimens have been deposited with the Zoological Survey of India for future reference.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
News Network
December 2,2025

DKSsiddu.jpg

Bengaluru: 'Nati koli saaru' (country chicken curry) considered one of Chief Minister Siddaramaiah’s favourites along with steaming hot idlis was on the breakfast menu at Deputy CM D K Shivakumar’s residence on Tuesday, according to official sources.

The spread also included 'nati koli' fry, vada and pongal, among other items, they said.

In an apparent show of unity, Siddaramaiah visited Shivakumar’s residence for breakfast, just days after the two leaders shared a meal amid a simmering power tussle in the state Congress.

Siddaramaiah drove to the Deputy CM’s residence in Sadashivanagar, where he was received by Shivakumar and his brother D K Suresh, who is a former Congress MP.

Suresh and Kunigal MLA H D Ranganath, a relative of Shivakumar, joined them for breakfast, which featured a mix of vegetarian and non-vegetarian dishes.

Speaking to reporters later, Siddaramaiah said Shivakumar had invited him during his visit to the CM’s residence for breakfast on Saturday.

Asked about the difference between the two meals, the chief minister said, "At his (Shivakumar’s) house it was non-veg, while at my house it was veg. He is a vegetarian, I am a non-vegetarian. I had not prepared non-veg. I told DK to get chicken from the village as you won’t get the original in Bengaluru."

Shivakumar said he had initially invited Siddaramaiah to his residence, but the CM had suggested visiting his place first and reciprocating later. "It was a vegetarian breakfast at the CM’s house on Saturday," he noted.

"Today, I invited him (the CM) to my house. He enjoyed the breakfast, which had his Mysuru taste," Shivakumar added. At this point, Siddaramaiah remarked that Shivakumar’s wife is also from Mysuru.

Saturday’s breakfast at Siddaramaiah’s official residence, held as part of efforts by the Congress high command to ease tensions in the leadership dispute between the two, reportedly included idlis and sambar, according to official sources.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
News Network
December 2,2025

Puttur: The long-cherished dream of a government medical college in Puttur has moved a decisive step closer to reality, with the Karnataka State Finance Department granting its official approval for the construction of a new 300-bed hospital.

Puttur MLA Ashok Kumar Rai announced the crucial development to reporters on Monday, confirming that the official communication from the finance department was issued on November 27. This 300-bed facility is intended to be the cornerstone for the establishment of the government medical college, a project announced in the state budget.

Fast-Track Implementation

The MLA outlined an aggressive timeline for the project:

•    A Detailed Project Report (DPR) for the hospital is expected to be ready within 45 days.

•    The tender process for the construction will be completed within two months.

Following the completion of the tender process, Chief Minister Siddaramaiah is scheduled to lay the foundation stone for the project.

"Setting up a medical college in Puttur is a historical decision by the Congress government in Karnataka," Rai stated. The project has an estimated budget allocation of Rs 1,000 crore for the medical college.

Focus on Medical Education Department

The MLA highlighted a key strategic move: requesting the government to implement the hospital construction through the Medical Education Department instead of the Health and Family Welfare Department. This is intended to streamline the entire process of establishing the full medical college, ensuring the facilities—including labs, operation theatres, and other necessary infrastructure—adhere to the strict guidelines set by the Medical Council of India (MCI). The proposed site for the project is in Bannur.

Rai also took the opportunity to address political criticism, stating that the government has fulfilled its promise despite "apprehensions" and "mocking and criticising" from opposition parties who had failed to take similar initiatives when they were in power. "Chief Minister Siddaramaiah has kept his word," he added.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.