Juspay Data Leak _ Amazon aur Swiggy customers ke liye Tension*

Amazon ke big billion sale me jis jis ne participate kiya hai, jo har din Swiggy se bhar bhar ke order karte hain unke liye aaj ka video bahut important hai. Kyun? Kya aapko pata hai ki aapke Card ka data khatre me hain? Ye data shayad hackers ke paas pahuch gaya hai aur, aapka email ID aur personal mobile number bhi hackers ke pas pahuch gaya hai, aur kabhi bhi aap Phishing attack ka shikaar ho sakte hain. Kaise hua ye dataleak aur kya karna chahiye aapko? Kaise ensure karein ke aapke account se achanak lakhon rupay gayab nahi ho jaye? Poora post ko read kijiye, Blog ko subscribe kijiye. 

Juspay kya hai?

Jab bhi aap koi online ecommerce website ya food delivery app me payment karte hain to kaise hota hai ye payment? Aapke Bank Account se app ya ecommerce website khud jaake paise leke nahi aata. Ye kaam karte hain Payment Gateways - jo safe and secure tareeke se aapke bank se aapka paisa leke merchant website ke account me jama karta hai. Ye process bahut zyada secure hota hai kyun ki Payment Gateway ko aap apna Bank details ya Card details dono provide karte hain. Isi process ko secure karne ke liye RBI ne two step authentication ka process chalu kiya tha, jiske wajah se koi bhi online payment karte waqt, India ke andar, aapko ya to apna OTP ya fir card PIN entry karna hota hai. OTP diya to theek, lekin PIN number diya to ek chance ye rehta hai ki koi hacker agar wo details aapke Payment Merchant se nikal le, to fir aapke paise ko illegaly churaya jaa sakta hai. 

Juspay aisa hi ek payment gateway hai jo aapke aur e-commerce website ke beech me paise len den ka matter handle karta hai. Amazon aur Swiggy jaise bade companies ke transactions Juspay ke zariyehota hai. Isi Juspay company ne, apne recent announcement me ye kaha hai ki August 2020 me, yaani aaj se 6 mahine pehle Juspay ke secure data store se, kisi hacker ne lagbhag 3.5 Crore Masked Card Data aur Customer Personal data chura liya hai. Aur ye announcement unhone kiya hai 6 mahine baad yaani jan 2021 me. Kaise hua ye chori aur aap kya karenge?

Kaise hua Data Theft?

Juspay ke website me jayenge to aapko dikhega ki wo apne aap ko Payment ka AWS keh rahe hain. AWS ka matlab hain Amazon Web Services jo inke technological functionality ka main part hai. AWS access key ek aisa chabi hai jiske zariye inke data centers ko access kiya jaata hai. Data centers wo jagah hai jahan aapka aur mera poora data save rehta hai. Isko aap lakhon karor hard disk ka ek unique storage place keh sakte hain. AWS access keys sirf company ke employees ke paas hote hai. Lekin aisa ek unrecycled, yaani jo purana access hai, matlab ya to company ke koi ex employee ka access key kisine hack kiya tha ya to us employee ka isme kuch role tha, aise ek access key ke zariye, 18th August 2020 ke aaspaas kuch unauthorized activity hui, jisme lagbhag 3.5 Crore Masked Card Data and personal Information jaise mobile number, email ID - isko churaya gaya. Juspay ka kehna hai ki unko jaise is baare me pata chala to ye attck rok diya gaya. MAsked card data me sirf 4-8 number hi dikhte haiCredit ya Debit card ka. Aur PIN related data usme store nahi hota hai. Isliye Juspay ka kehna hai ki ye data breach se consumers ko phishing ka koi khatra nahi hai. Lekin aisi baatein companies hamesha karti rehti hai, kyun ki agar khtra sach me ho, to fir Juspay ki credibility kharab hogi aur copany doob sakti hai. Isme actually kitna khatra hai? 

Consumers ko Kitna Khatra

Sabse pehle samajh lijiye ki Masked card data ek international format hai jisme sirf 4-8 numbers hi dikhte hain. Is data me koi PIN number nahi rehta, nahi isme poora card number dikhta hai. Isiliye agar Sirf Masked Card data chori hua hai to direct threat nahi hai. Lekin Hackers ne agar back calculation kiya, clients name ke saath backcheck kiya poore data ko to wo card ka full 16 digit jaan sakte hain. Fir bhi successful transaction karne ke liye unko CVV number ya fir card PIN chahiye hoga jo India me koi bhi online trasaction ke liye zaroori hai. Lekin HAckers ne cients ke Mobile number aur email IDs bhi churaye hain. Yaani hackers, is tareeke se phishing attempt karne ki koshish kar sakte hain. Aapko call ya email ke zariye thagne ki koshish ki jaa sakti hai. Ab juspay ne affected consumers ke naam nahi bataye hain. Agar wo data bahar aaye to fir wo consumers savdhaan reh sakte hain. 

Juspay ka kehna hai ki data breach se koi affected nahi hoga. Lekin kya ye risk hum utha sakte hain? Agar risk hai hi nahin to fir breach ke 6 mahine baad, koi Darknet me jaake is data ko kyun bech raha tha, wo bhi Juspay ko hi? FIlhaal hackers ne ek sample data dump kiya hai Darknet me. Darknet wo jagah hai jaha aap google search ke zariye nahi pahuch sakte, magar yaha par bahut saari illegal activities hoti hai, kyun ki ye anonymous browsing ko support karta hai. Hackers ne poora data dene ke badle $8000 in Bitcoins maange the. Experts ka maan na ye hai ki Hackers shayad is data se phishing attemptkarenge. Ya fir doosra bahut bada risk hai international merchants se online trasaction. In transactions me PIN ya OTP nahi chahiye. Yaani sirf aapke card number aur CVV rahe, to koi bhi aapke card se kuch bhi khareed sakta hai. To Filhaal users ke liye best option yehi hoga ke wo apna Credit ya Debit card ke International Usage ko band kar de. Ye aap Netbanking ya phone banking ya messaging ke zariye kar sakte hain. Safe rehna humari zimmedari hai, kyun ki company apna profit dekhegi, us chakkar me kuch data aur paisa idhar udhar hua to usko kuch farak nahi aane wala.