An Indian flight booking website majority-owned by US retail colossus Walmart has experienced a data breach, but is saying very little about what happened or the risks to customers.

News of the breach emerged on Monday, when customers received a message depicted in the tweet below.

[1]@Cleartrip would you mind telling us when the breach happened? [2]pic.twitter.com/JvMLT1pAp9 — Jayesh Kumar (@Jayesh_Kumar) [3]July 18, 2022

While the message to customers assures them that "no sensitive information pertaining to your Cleartrip account" was exposed, that leaves open the possibility that information pertinent to other matters may have been accessed. The Register therefore asked Cleartrip how attackers were able to access its systems, what data was exposed, whether that data was encrypted, if any information was exfiltrated, when the breach was detected, when the company notified users, and how the company plans to change its infosec practices in response to the breach.

[4]Alibaba execs hauled in to discuss Shanghai Police data leak

[5]1.9m patient records exposed in healthcare debt collector ransomware attack

[6]This big phish can swim around MFA, says Microsoft Security

[7]How data on a billion people may have leaked from a Chinese police dashboard

A spokesperson replied with the following:

We have identified a security anomaly in a few of our internal systems. Our information security team is currently investigating the matter along with a leading external forensics partner and is taking the necessary action. Appropriate legal action and recourse are being evaluated and steps are being taken as per the law.

We're sure that's a comfort to Cleartrip customers – especially as Indian media [8]reports that Cleartrip data has been put up for sale on the dark web.

The CLEARTRIP seems to have suffered a massive data breach !!

The screenshot as was posted by the threat actor (on private forum) to sell the data. As can be seen : the breach is new, customer entries info as well as internal company files are there. [9]#cybersecurity [10]#CyberAttack [11]pic.twitter.com/ldAM2JtsCb — Sunny Nehra (@sunnynehrabro) [12]July 18, 2022

Air India admits to data breach impacting 4.5M customers, sat on the news for five weeks [13]READ MORE

One more thing to worry about: while Cleartrip is based in Mumbai and targets the Indian market, it happily serves customers anywhere. Maybe it's worth checking who you bought that cheap ticket from back in the day?

We also asked Cleartrip if it had complied with India's recently introduced requirements to [14]report the incident within six hours of detection . At the time of writing we've not had a response to that query.

Cleartrip was acquired by Indian ecommerce player Flipkart in 2021. Flipkart itself is 70 percent owned by Walmart. China's Tencent also owns a chunk of Flipkart. All parties now have a mess to consider. ®

[15]

Get our [16]Tech Resources



[1] https://twitter.com/Cleartrip?ref_src=twsrc%5Etfw

[2] https://t.co/JvMLT1pAp9

[3] https://twitter.com/Jayesh_Kumar/status/1548975687218122752?ref_src=twsrc%5Etfw

[4] https://www.theregister.com/2022/07/18/apac_tech_news_roundup/

[5] https://www.theregister.com/2022/07/13/19m_patients_medical_data_exposed/

[6] https://www.theregister.com/2022/07/13/aitm-phishing-microsoft/

[7] https://www.theregister.com/2022/07/10/stolen_shanghai_police_data/

[8] https://www.uttarpradeshlive.com/flipkart-cleartrip-data-breach-hackers-put-data-up-for-sale-on-the-dark-web/

[9] https://twitter.com/hashtag/cybersecurity?src=hash&ref_src=twsrc%5Etfw

[10] https://twitter.com/hashtag/CyberAttack?src=hash&ref_src=twsrc%5Etfw

[11] https://t.co/ldAM2JtsCb

[12] https://twitter.com/sunnynehrabro/status/1549016679245500417?ref_src=twsrc%5Etfw

[13] https://www.theregister.com/2021/05/24/air_india_sita_data_breach/

[14] https://www.theregister.com/2022/06/28/india_directions_deadline_logging/

[15] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2YtbVIrpe8a9722bdY98JTwAAAIM&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0

[16] https://whitepapers.theregister.com/