Flaw in Airtel's mobile app exposed data of 32 cr subscribers

by IANS |

New Delhi, Dec 7 (IANS) In yet another massive data breach incident, data of over 32 crore subscribers of telecom major Airtel were exposed and became vulnerable due to a serious security flaw in its mobile application.

Ehraz Ahmed, a Bengaluru-based researcher, who first noticed the fault, said in his blog written on Friday that the flaw existed in one of Airtel's API (Application Program Interface) that allowed people to fetch sensitive user information of any Airtel subscriber.

According to reports, Airtel confirmed the breach saying that it has fixed the security flaw associated with its application.

Ahmed also posted a video, which shows a script being used to fetch the information from the Airtel mobile app's API.

"It revealed information like First and Last Name, Gender, Email, Date of Birth, Address, Subscription Information, Device Capability information for 4G, 3G & GPRS, Network Information, Activation Date, User Type [Prepaid/Postpaid] And Current IMEI number," he wrote in his blog.

The IMEI number can be used to identify the device of an user.

According to the blog, every user on Airtel network was at the risk of getting his/her information leaked through this vulnerability.

Airtel is the third largest telecom service provider in the country in terms of subscribers after Vodafone-Idea and Reliance Jio.

Latest News
UN seeks leading role for Afghan women in peace Mon, Mar 08, 2021, 03:38 PM
Gurugram: Only 400 of 58,580 recovered patients donated plasma Mon, Mar 08, 2021, 03:33 PM
NASA names Mars rover touchdown site after Octavia Butler Mon, Mar 08, 2021, 03:08 PM
Vietnam begins Covid vax campaign Mon, Mar 08, 2021, 03:00 PM
NH-9, NH-24 shut over farmers stir, heavy traffic on NH-44 Mon, Mar 08, 2021, 02:51 PM
Kerala BJP asks CM to reply to Shah's questions Mon, Mar 08, 2021, 02:43 PM
Everyone in NZ will have access to vax: PM Mon, Mar 08, 2021, 02:34 PM
Uzbek & Indian soldiers to start anti-terror drills on U'khand hills Mon, Mar 08, 2021, 02:27 PM
Landmines kill 18 in Syria Mon, Mar 08, 2021, 01:24 PM
Delhi police acknowledge the women power on Women's Day! Mon, Mar 08, 2021, 01:19 PM
T'gana movement activist K Chiranjeevi passes away Mon, Mar 08, 2021, 12:41 PM
On women's day, Maha gives females exclusive vaccination centres Mon, Mar 08, 2021, 12:39 PM
Rahul at national executive meet of Youth Congress Mon, Mar 08, 2021, 12:29 PM
Pichai pledges $25mn to empower women including in India Mon, Mar 08, 2021, 12:16 PM
Rain, light snow lash J&K Mon, Mar 08, 2021, 12:08 PM