Description: Over 120 million Reliance Jio users' data appeared to have been compromised in what appeared to be India's biggest data breach, according to a bland website called magicapk. The website disclosed information like first and surname names, phone numbers, email addresses, circles, SIM activation dates, and even Aadhaar numbers. They investigated and assured to the customer that customer details cannot be shared without their consent.

Description: India’s largest cell network Jio, a subsidiary of Reliance, launched its coronavirus self-test symptom checker in late March, just before the Indian government imposed a strict nationwide lockdown to prevent the further spread of the coronavirus. A security lapse exposed one of the symptom checker’s core databases to the internet without a password. The database contains millions of logs and records starting April 17 through to the time that the database was pulled offline. Although the server contained a running log of website errors and other system messages, it also ingested vast numbers of user-generated self-test data. Each self-test was logged in the database and included a record of who took the test — such as “self” or a relative, their age, and their gender. The data also included the person’s user agent, a small snippet of information about the user’s browser version, and the operating system often used to load the website properly but can also be used to track a user’s online activity. Some of the records also contained the user’s precise location, but only if the user allowed the symptom checker access to their browser or phone’s location data. Most of the location data were clustered around major cities, such as Mumbai and Pune. TechCrunch also found users in the United Kingdom and North America.

Description: The largest breach of personal data in Indian history involved the exposure of personal information belonging to around 120 million users of the Indian corporation Reliance Jio. Customers of Reliance Jio can now look for their identifying information by entering their Reliance Jio number into the Magicapk.com website. Although the website is no longer available, numerous users attested to the accuracy of the information. Names, email addresses, phone numbers, circle-Ids, SIM activation dates and times, and, for some users, Aadhaar numbers are among the stolen data. Reliance Jio issued a statement disputing the data theft and stating that it doesn't seem like the stolen data is real.