boAt Lifestyle, a well-known tech accessory brand in India, has been reportedly hit with a data breach which affects more than 7.5 million boAt customers. According to a Forbes report, the Personally Identifiable Information (PII) of these users surfaced on the dark web. The data included names, phone numbers, addresses, e-mail IDs, customer IDs and more of boAt users.
According to the report, roughly 2GB of data is available for purchase on Breach Forums. This data came to the fore on April 5 when a hacker 'ShopifyGUY' reportedly breached the data of the audio and wearable tech brand. The dumped files include the PII information and had 75,50,000 entries.
Also Read: boAt's New Ad Campaign Mocks Apple Fans, Says 'Don't Be A FanBoy'
The company has not shared any public statement confirming or refuting the breach at the time of filing. For context, ShopifyGUY is a new name (Breach Forum member since March 5, 2024) in the data breach industry with only this leak on his profile, according to The Tech Outlook. The uncompressed size of data is roughly 13.06GB. This breach reportedly happened in March, and the data was uploaded on the online forum on April 5.
Recommended For You
If the claims turn out to be true, this could have far-reaching consequences for affected customers. This data is available for eight credits on some forums, according to Security Brigade's founder Yash Kadakia. This implies it takes only two euros (roughly Rs 180) to buy the data.
This data may be available for free on Telegram days after the incident, which leaves ample room for scammers to target these customers via sophisticated attacks. As per an IDC report, boAt was the second most popular wearable brand in Q3 last year. The sales crossed the Rs 3,000 crore mark in March 2023. It serves as a direct rival to brands like Noise, Fire-Boltt, and more.