Walmart-controlled flight booking service Cleartrip suffered a data breach incident that affected thousands of its Indian customers.
Although no sensitive information related to Cleartrip account was exposed but the information pertinent to other matters was accessed.
The threat actors also posted a screenshot on private forum to sell the data containing customer entries info as well as internal company files.
Source: https://www.theregister.com/2022/07/19/cleartrip_data_leak/
TPRM report: https://scoringcyber.rankiteo.com/company/cleartrip
"id": "cle1225251022",
"linkid": "cleartrip",
"type": "Breach",
"date": "07/2022",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"
{'affected_entities': [{'customers_affected': 'Thousands',
'industry': 'Travel',
'location': 'India',
'name': 'Cleartrip',
'type': 'Flight Booking Service'}],
'data_breach': {'data_exfiltration': True,
'type_of_data_compromised': ['Customer entries info',
'Internal company files']},
'description': 'Walmart-controlled flight booking service Cleartrip suffered '
'a data breach incident that affected thousands of its Indian '
'customers. Although no sensitive information related to '
'Cleartrip account was exposed, the information pertinent to '
'other matters was accessed. The threat actors also posted a '
'screenshot on a private forum to sell the data containing '
'customer entries info as well as internal company files.',
'impact': {'data_compromised': ['Customer entries info',
'Internal company files']},
'initial_access_broker': {'data_sold_on_dark_web': True},
'motivation': 'Data Theft',
'title': 'Cleartrip Data Breach',
'type': 'Data Breach'}