The Whoosh scooter-sharing service company in Russia has shared that they have suffered a data breach attack against their systems after the attackers started to sell the stolen data on a hacking forum.
Based on reports, the hackers offer online a database that contains the information of more than seven million customers.
Whoosh is one of Russia’s big-time urban mobility service platforms that operates in nearly 40 cities and offers over 75,000 scooters.
Last week, an unidentified attacker started selling the company’s data on a hacking forum, which researchers believe contains promotion codes that users can use to access the service for free. User identification and payment card data are also included in the offered data.
The Whoosh scooter-sharing service assured its customers they had already thwarted the attack.
According to Whoosh, their IT team has addressed the situation immediately. The company confirmed a data leak and notified its user base that they are working with authorities to take mitigation measures to stop data spread.
The Russian entity explained that the leak did not impact sensitive user data, such as transaction information, travel details, or account access. Furthermore, the company spokesperson revealed that their security procedures also exclude the chances of third parties obtaining access to complete payment data of their client’s bank cards.
The data breach attack last week resulted in data leakage on a hacking forum. The post includes 7.2 million customer data that contained first names, phone numbers, and email addresses.
Moreover, the database displayed nearly two million users’ partial payment card details. The unidentified seller also claimed that the stolen information included 3 million promo codes, which redeemers could use to rent the company’s scooters without providing any fee.
However, the seller stated that they are offering the data to only five customers for about $4,200, which translates to [.]214 bitcoins. But the hackers are struggling to find buyers as they have yet to sell a single data set.
