Breach Disclosure: Dunzo

An Indian delivery service company, Dunzo, suffered a data breach that involved unauthorized access to one of its databases. According to TheNewsMinute, the breach occurred on or around 11 July 2020. The compromised database contained a number of columns, including usernames, emails, mobile phone numbers and password hashes. The stolen data was initially put up for sale on RaidForums by ShinyHunters.

Recommendations

Enable 2-factor authentication for all of your organizational accounts to help mitigate phishing and credential stuffing attacks
If not already enabled, turn on the compromised credentials rule for all relevant entities and ensure relevant emails are entered for those entities, or reach out to [email protected] for assistance
If one of your entities receives an alert, ZeroFOX recommends immediate password changes for the affected account.

Details

Dunzo is an Indian company that provides delivery services in Bengaluru, Delhi, Gurugram, Pune, Chennai, Jaipur, Mumbai and Hyderabad. It suffered a security breach that involved unauthorized access to one of its databases. The exposed data contained 3.5M unique email addresses.

Figure 1: ShinyHunters Post

The schema posted by ShinyHunters is as follows:

id
password
last_login
is_superuser
uuid
first_name
last_name
email
phone
country_code
type
status
device_token
phone_type
phone_make
date_joined
last_updated
secret_key
app_version
registered_on
registered_platform
send_logistics_pricing
send_logistics_pricing_image_format
last_pricing_version_shared
preferred_mode_of_payment
credit_amount
credit_score
maximum_retries_count
profile_data_updated_on_firebase
merchant_id
permission_role
user_status
flow_version
extra_data_json
city_id
current_runner_task_id
source
first_known_location
last_known_location
referral_code
referred_by_code
advertising_id
device_id
bucket_id