After hackers claimed to have accessed Star Health customers' data, Star Health Insurance Company acknowledged the cyber attack and said it is currently conducting a thorough forensic investigation. As per IANS news report, over 3.1 crore individuals are potentially affected. The hacker has reportedly offered the data for sale on a website, with the entire 7.24TB of data priced at Rs 57.5 lakh. Star Health stock dipped 2.14 per cent (Rs 12.35) to Rs 565.35 after the news of data leak went public.
Hackers had earlier made alarming claims that Amarjeet Khanuja, Star Health's Chief Information Security Officer (CISO), sold access to this sensitive data. However, the company has stated that Khanuja is cooperating with the investigation and that no wrongdoing has been established against him so far.
Star Health Insurance said: "We make it absolutely clear that our operations remain unaffected, and all services continue without disruption. A thorough and rigorous forensic investigation, led by independent cybersecurity experts is underway, and we are working closely with government and regulatory authorities at every stage of this investigation, including by duly reporting the incident to the insurance and cybersecurity regulatory authorities, apart from filing a criminal complaint".
"Our CISO has been duly co-operating in the investigation and we have not arrived at any finding of wrongdoing by him to date. We request that his privacy be respected as we know that the threat actor is trying to create panic," it added.
Star Health Data Leak
The hacker claims on the website where the data is put for an offer for sale, "This leak is sponsored by Star Health and Allied Insurance Company, who sold this data to me directly. You can check the authenticity of the data in the Telegram bots below and read about how they sold it".According to reports, a hacker known as "xenZen" claimed to have obtained and is selling alleged insurance claims data of over 5.7 million Star Health customers, along with data of over 31 million customers. The leaked information reportedly includes personal details such as full names, PAN numbers, mobile numbers, emails, date of birth, residential addresses, insured date of birth, insured names, gender, pre-existing diseases, policy numbers, health cards, nominee names, age, claims, nominee relationship, insured height, weight, BMI and more. Star Health had reportedly filed a lawsuit against the social media platform Telegram and the hacker.ReplyForward
AC
