Ola Cabs Hacked…

A hacker group has announced on Reddit that they have hacked Ola Cabs database, and have access to critical information such as credit card details, transaction history and voucher codes (unused).

The hackers announced on Reddit, “Once we got to the database it was like winning a lottery. It had all the user details along with credit card transaction history and unused vouchers. The voucher codes are not even out yet..”

Although this unknown hacker group has assured everyone that they won’t be using or saving any credit card details and unused voucher codes, there exist immense apprehensions after this announcement of hacking.

Calling themselves ‘Team Unknown’, this hacker group has posted three screenshots of the data base which allegedly belongs to Ola Cabs:

As we can see in the first screenshot, hackers have access to email ids of various employees and users, phone numbers and named. In the second screenshot, the hacker has shown that he can access all major tables inside the database such as user preferences, user details and transaction history. The third screenshot depicts MySQL codes which can retrieve any information he or she wants from Ola database.

‘Team Unknown’ has claimed that they have contacted Ola Management about this hack, but as of now, they have received no notifications from them.

Lastly, their announcement said, “I am sure OLA might be having a security team of their own. Not that good it seems ;) “

Here is a statement from Ola cabs in regards to this.

 There has been no security lapse, whatsoever to any user data. The alleged hack seems to have been performed on a staging environment when exposed for one of our test runs. The staging environment is on a completely different network compared to our production environment, and only has dummy user values exclusively used for internal testing purposes. We confirm that there has been no attempt by the hackers to reach out to us in this regard. Security and privacy of customer data is paramount to us at Ola.

 Here is a statement from Team Unknown in regards to this.

We have read some news/posts regarding the OLA Hack and we've come across the statement released by OLA Officials which states that we didn't contact them about the vulnerability, a claim that has no grounds. We did send them a mail and got no response from their side. We've already shared the screenshot of the mail. 

TeamUnknown just wants to ensure that the company which is dealing with critical information about the users like credit cards, personal info, should be secure enough even if its their development server. We already stated that we didn't store and use any of the critical information which may harm the company and their users.

Regards, Team Unknown