BSNL Faces Alarming Data Breach: Hacker “Perell” Exposes Sensitive User Information on Dark Web

December 23, 2023: In a disturbing revelation, India’s state-owned telecom giant, Bharat Sanchar Nigam Ltd (BSNL), has become the latest victim of a severe data breach. Reports indicate that the stolen data of thousands of BSNL internet and landline users is currently up for sale on the dark web, raising serious concerns about the privacy and security of affected customers.

According to an exclusive report by the Economic Times (ET), a hacker operating under the alias “Perell” has emerged on the dark web, claiming to possess critical information about users of a telecom company’s services, particularly those utilizing fibre and landline connections from BSNL in India.

“Perell” has reportedly shared a portion of the pilfered data on the dark web, exposing sensitive details including email addresses, billing information, contact numbers, and other private information associated with BSNL’s fibre and landline users. The gravity of the situation intensifies with the compromise of more critical data, such as mobile service outage records, network specifics, completed orders, and additional customer information.

Despite the absence of a public acknowledgment from BSNL regarding the breach, an undisclosed source familiar with the situation has underscored the severity of the incident, emphasizing the immediate threat to the privacy and security of BSNL customers. The data disclosed by “Perell” encompasses approximately 32,000 lines of information, while the hacker claims to have accessed a staggering 2.9 million lines of data from all BSNL databases, including district-wise details of its customers.

Although BSNL has yet to confirm the breach publicly, reports suggest that the Indian cybersecurity agency Cert-In has been apprised of the hacking incident.

Kanishk Gaur, a respected cybersecurity expert and founder of India Future Foundation, expressed deep concern about the breach, emphasizing its potential far-reaching implications for both BSNL and its users. Gaur highlighted the seriousness of the breach, pointing out that it not only endangers user privacy but also exposes them to risks such as identity theft, financial fraud, and targeted phishing attempts.

In response to this critical situation, immediate action is imperative from BSNL and relevant authorities to mitigate risks and safeguard affected users against potential harm stemming from the compromised data. This incident underscores the growing challenges posed by cyber threats and reinforces the need for robust measures to protect sensitive user information in the digital age.