India's Insurance Giant Sues Telegram Over Data Breach

Friend

Professional
Messages
2,653
Reaction score
850
Points
113
Star Health accuses the platform of assisting the hacker.

Indian insurance company Star Health, whose market capitalization exceeds $4 billion, sued the Telegram messenger and the hacker, after Reuters reported that the hacker used the platform's chatbots to illegally distribute personal data and medical reports of customers.

The lawsuit was filed against the backdrop of increased attention to Telegram after the arrest of the company's founder Pavel Durov in France. Durov is accused of using his messenger for illegal activities, but Telegram and its founder deny these accusations.

A court in Tamil Nadu has temporarily ordered the blocking of any chatbots and websites that provide access to leaked data on the internet. As part of the case, Star Health also filed a lawsuit against the American firm Cloudflare, alleging that its services were used to post leaked data on websites.

According to the court, sensitive customer data and business information of Star Health were hacked and distributed using Telegram. The court sent notices to Telegram and Cloudflare, the next hearing is scheduled for October 25.

According to a statement from Star Health, two chatbots on the Telegram platform distributed customer data. One provided access to insurance documents in PDF format, and the other allowed you to request up to 20 sample data from a database containing information on 31.2 million customers, including names, phone numbers and medical results.

As British security researcher Jason Parker found out, Star Health chatbots contained a welcome message indicating that they were created by a user with the nickname xenZen and have been working since August 6. Parker, posing as a buyer on a hacker forum, received confirmation from xenZen that the hacker has 7.24 TB of data related to more than 31 million Star Health customers. In part, this data could be available for free through chatbots in Telegram.

Reuters previously managed to upload more than 1.5 thousand files with personal data of customers dated July 2024. Despite the removal of chatbots, new ones later appeared.

Star Health also filed a lawsuit against the xenZen hacker, who reportedly distributed data. The hacker told Reuters that he was ready to participate in the hearings online if he was given the opportunity.

Source
 
Top