Over 120,000 Hyundai India car owner’s information hacked, for sale on Dark Web

Moreover, the hacker is also asking for $300 or Rs 25,000 for all 120,000 user data coupled with approximately 1,500 dealers' data. The threat actor shared this new post on December 17 and claims that the data that has been leaked is up to date.

Hackers on the Dark Web have got hold of almost 120,000 Hyundai Indian car owners and have leaked them. The hacker had first shared the news via two posts between December 6 to December 9, 2022, and the information were first posted on popular underground hacking forums, Beach Forums.

However, as per the latest post that the threat actor shared, he claims that the method of compromise is “open mongodb” and that the exploit is “fixed now”. In addition, the database of all 120,000 Hyundai India users are now dumped by the hacker and put on sale. Along with users, the hacker has also leaked data of 1,500 dealers.

He has put up the data of all the users and the dealers for $300 or Rs 25,000. The purchase price of all users, plus dealers and along with that vulnerability of dealers dump has bee put up for sale at $600, or Rs 50,000. However, if one decides to own it all, then the cost of it all is $1000.

To support his claim, the threat actor has also attached snippets of all the user related data. The user data includes the following:

•     Vehicle registration number
•     Vehicle identification number
•     Registered mobile number of the owner
•     Customer ID
•     Warranty date
•     Car model
•     Insurance details
•     Fuel type
•     Odometer readings.

On the other hand, the sample data of dealers includes the following information:

•     Dealer code
•     Dealer name
•     GPS longitude, latitude
•     Address
•     Phone numbers
•     Email
•     Fax
•     Booking numbers

Source