A massive data leak of Star Health and Allied Insurance Co has come into light with sensitive information of over 3 crore users leaked by hackers, confirmed the Indian health insurance provider on Wednesday.
Two weeks after Star Health sued social media platform, Telegram, On Wednesday, a website created by XenZen claimed to have accessed over 32, 216,953 users’ data available for $150,000.
Allegations are – hackers reportedly used Telegram chatbots to share samples of the personal data with potential buyers. The personal health data on sale included phone numbers, addresses, tax details, copies of ID cards, test results, and medical diagnoses reports of victims.
Another shocking revelation was made by hackers who alleged that Amarjeet Khanuja, Star Health’s Chief information Security Officer (CISO) sold the leaked data to them.
“I am leaking All Star Health India customers and insurance claims sensitive data. This leak is sponsored by Star health and Allied Insurance company which sold this data to me directly you can check the authenticity of the data in the telegram bots below and read about how they sold it in section below,” the hacker, who goes by the name “xenZen” wrote on the website, used for selling sensitive data.
In its response, Star Health stated, “A detailed investigation by cybersecurity experts is underway. Apart from taking legal action, we are working hand in hand with government and regulatory authorities.
Star Health whose headquarters are based out of Chennai facilitates health insurance to around 17 crore citizens. It holds around 14,000 hospitals and 850 offices across the country and provides accidents and travel insurances.
