The Mumbai Police have arrested a 27-year-old interior designer from Haryana’s Ambala for his alleged involvement in a cyberattack on HDFC Life Insurance. The suspect reportedly collaborated with a mastermind based in Hong Kong to steal sensitive customer data and blackmail the company.
HDFC Life Insurance had reported a cyberattack that compromised confidential customer information. The breach, which occurred between November 19 and November 21, 2024, involved cybercriminals using an email address and a WhatsApp account to access sensitive policyholder data.
The stolen data included policy numbers, names, addresses, mobile numbers, and critical health information related to illnesses. The attackers initially contacted HDFC Life on November 19, threatening to release the data unless their extortion demands were met. They sent a second, escalated threat through WhatsApp shortly thereafter.
HOW BREACH WAS EXECUTED
According to the investigation, the accused entered HDFC Life’s server system under the pretence of purchasing policies. By intercepting OTPs (One-Time Passwords), they gained unauthorised access to the database. This information was shared with the Hong Kong-based hacker, who downloaded the stolen data.
The cybercriminals sent samples of the stolen data to HDFC Life via email as proof of their capabilities, demanding a ransom to prevent its public release.
COMPANY’S RESPONSE TO BREACH
HDFC Life lodged a complaint with the South Region Cyber Police, prompting a case under various sections of the BNS Act and IT Act. The company’s Associate Vice President (Legal) detailed the sequence of events in the complaint.
In a statement to stock exchanges, HDFC Life had acknowledged the breach and assured stakeholders that they had initiated a detailed investigation with cybersecurity experts.
Source: Business Standard
ISO Certified: 9001 – 2015
The Mumbai Police have arrested a 27-year-old interior designer from Haryana’s Ambala for his alleged involvement in a cyberattack on HDFC Life Insurance. The suspect reportedly collaborated with a mastermind based in Hong Kong to steal sensitive customer data and blackmail the company.
HDFC Life Insurance had reported a cyberattack that compromised confidential customer information. The breach, which occurred between November 19 and November 21, 2024, involved cybercriminals using an email address and a WhatsApp account to access sensitive policyholder data.
The stolen data included policy numbers, names, addresses, mobile numbers, and critical health information related to illnesses. The attackers initially contacted HDFC Life on November 19, threatening to release the data unless their extortion demands were met. They sent a second, escalated threat through WhatsApp shortly thereafter.
HOW BREACH WAS EXECUTED
According to the investigation, the accused entered HDFC Life’s server system under the pretence of purchasing policies. By intercepting OTPs (One-Time Passwords), they gained unauthorised access to the database. This information was shared with the Hong Kong-based hacker, who downloaded the stolen data.
The cybercriminals sent samples of the stolen data to HDFC Life via email as proof of their capabilities, demanding a ransom to prevent its public release.
COMPANY’S RESPONSE TO BREACH
HDFC Life lodged a complaint with the South Region Cyber Police, prompting a case under various sections of the BNS Act and IT Act. The company’s Associate Vice President (Legal) detailed the sequence of events in the complaint.
In a statement to stock exchanges, HDFC Life had acknowledged the breach and assured stakeholders that they had initiated a detailed investigation with cybersecurity experts.
Source: Business Standard
Buy Online Insurance