Most cyberattacks do not include threat actors maliciously wiping servers and deleting all data. But when they do, the consequences are devastating to any victim that doesn’t have an updated and usable backup that can be used to restore. The420.in reports:
KiranaPro, a Bengaluru-based grocery delivery platform operating on the Indian government’s Open Network for Digital Commerce (ONDC), has been severely disrupted after a devastating cyberattack wiped out its servers and code base. According to CEO Deepak Ravindran, hackers deleted the company’s core app infrastructure hosted on Amazon Web Services (AWS), along with associated GitHub repositories. The lost data includes sensitive customer information such as names, addresses, and payment details.
Although details are not clear at this time, the incident is also a reminder to companies to make sure that employee access is disabled when employment ends or a project ends:
The breach was discovered on May 26 when executives failed to access their AWS management console and GitHub repositories. Security logs obtained from GitHub suggest that the hack may have originated through access left behind by a former employee. Screenshots provided by Ravindran show suspicious login activity around May 24–25.
The company has not yet confirmed whether the lost data can be recovered or whether usable backups exist. Nor is it clear what the motivation might be for wiping all the data. Was this a disgruntled former employee taking revenge? Was this an attempt to extort the victim where the victim did not pay? There is much we do not know at this point.
Read more at The420.in
