Bharat Sanchar Nigam Restricted (BSNL) has reportedly suffered an information breach and the risk actor concerned is allegedly claiming to have possessed delicate person and operational information. The federal government-owned telecom supplier’s servers had been attacked, and the hackers now possess SIM card particulars, residence location register information, and server-related crucial safety keys, as per the report. It’s stated that the stolen information will be misused to hold out felony actions similar to SIM card cloning, id theft, and even extortion.

Menace Actor Reportedly Breaches BSNL Servers

Citing an information breach report by the digital threat administration agency Athenian Tech, News18 reports that the risk actor behind the cyberattack goes by the identify “kiberphant0m”. It seems to be the hacker’s darkish net discussion board username. It can’t be confirmed whether or not the information breach was carried out by a person or a gaggle of hackers.

As per the report, round 278GB of information was compromised from BSNL’s telecom operations. The breached information is alleged to transcend person information and contains server snapshots that can be utilized to hold out additional assaults and create extreme safety dangers. The risk actor claims to own crucial info similar to Worldwide Cell Subscriber Identification (IMSI) numbers, SIM card particulars, PIN codes, authentication keys, and extra. Reportedly, it additionally contains snapshots of BSNL’s SOLARIS servers.

The risk actor has reportedly provided to promote the breached information for $5,000 (roughly Rs. 4.18 lakh). Speaking in regards to the uncovered information on a darkish net discussion board, the hacker allegedly additionally mentioned the potential of misusing it for felony actions similar to SIM cloning, id theft, and extortion.

“Whereas the particular vulnerabilities exploited by ‘kiberphant0m’ haven’t been publicly disclosed, entry to crucial techniques just like the House Location Register (HLR) and SOLARIS server snapshots signifies a deep penetration probably facilitated by exploiting software program vulnerabilities or utilizing refined social engineering strategies. The inclusion of server snapshots suggests attainable exploitation of recognized vulnerabilities inside BSNL’s server infrastructure, emphasising the necessity for rigorous patch administration and safety updates,” Kanishk Gaur, CEO of Athenian Tech informed the publication.

The alleged information breach poses a severe risk to tens of millions of BSNL customers whose delicate info may need been compromised. Notably, the telecom operator suffered an analogous information breach in December 2023. Devices 360 has reached out to BSNL for a touch upon the story, and we’ll replace the article as soon as we obtain a reply.