{"id":341378,"date":"2017-05-19T06:08:40","date_gmt":"2017-05-18T22:08:40","guid":{"rendered":"http:\/\/techcrunch.com\/?p=1493214"},"modified":"2017-05-19T06:08:40","modified_gmt":"2017-05-18T22:08:40","slug":"restaurant-guide-zomato-got-off-lightly-after-a-hacker-grabbed-6-6m-user-passwords","status":"publish","type":"post","link":"https:\/\/people.utm.my\/asmawisham\/restaurant-guide-zomato-got-off-lightly-after-a-hacker-grabbed-6-6m-user-passwords\/","title":{"rendered":"Restaurant guide Zomato got off lightly after a hacker grabbed 6.6M user passwords"},"content":{"rendered":"<p><img decoding=\"async\" src=\"https:\/\/tctechcrunch2011.files.wordpress.com\/2014\/12\/zomato_app1_hi-res-l-2.jpg?w=738\" class=\"\"\/><\/p>\n<p id=\"speakable-summary\">Restaurant guide and food delivery service\u00a0Zomato looks like it is getting off lightly after it suffered a hack that compromised personal information belonging to 6.6 million users.<\/p>\n<p>The India-based company, which offers\u00a0services in more than 20 countries worldwide,\u00a0set off alarm bells when <a target=\"_blank\" href=\"http:\/\/blog.zomato.com\/post\/160791675411\/security-notice\" rel=\"noopener noreferrer\">it revealed<\/a>\u00a0that a hacker had made off with\u00a017 million user records. That, Zomato said, included email addresses and hashed passwords but not credit card information.<\/p>\n<p>Initially, the stolen information was\u00a0put up for sale however\u00a0<a target=\"_blank\" href=\"http:\/\/blog.zomato.com\/post\/160807042556\/security-notice-update\" rel=\"noopener noreferrer\">the company later revealed<\/a>\u00a0that the hacker had agreed to remove the listing on the condition that Zomato introduces a fully-fledged bug bounty program.<\/p>\n<p>Zomato has operated <a target=\"_blank\" href=\"https:\/\/hackerone.com\/zomato\/\" rel=\"noopener noreferrer\">an account<\/a> on disclosure service Hacker One for more than a year, however <a target=\"_blank\" href=\"https:\/\/twitter.com\/deepigoyal\/status\/865257977053298693\" rel=\"noopener noreferrer\">CEO Deepinder Goyal confirmed on Twitter<\/a> that it would begin compensating hackers with money for their disclosures.<\/p>\n<p>Following the incident, Zomato\u00a0reset the passwords of\u00a0all affected users and logged them out of its\u00a0app and website. It said that 60 percent of its 17 million user records are tied to social log-in via Twitter or Facebook and therefore weren\u2019t impacted by the hack. The company claimed that the\u00a0passwords that were stolen \u201ccannot be easily converted back to plain text\u201d but <a target=\"_blank\" href=\"https:\/\/motherboard.vice.com\/en_us\/article\/restaurant-app-zomato-says-your-stolen-password-is-fine-but-is-it\" rel=\"noopener noreferrer\">Motherboard and security experts didn\u2019t have issues<\/a> converting a sample\u00a0of the data provided by the hacker into original\u00a0passwords.<\/p>\n<p>Security experts weren\u2019t impressed with Zomato\u2019s security measures.<\/p>\n<p>In this case there\u2019s no immediate danger since the hacker agreed not to sell\u00a0the data, but the situation\u00a0is a reminder that many companies do not have adequate security measures in place to protect users.<\/p>\n<p>That includes big ones. <a target=\"_blank\" href=\"https:\/\/techcrunch.com\/2015\/09\/07\/restaurant-discovery-site-zomato-eats-up-60m-to-fuel-expansion-into-new-verticals\/\" rel=\"noopener noreferrer\">Zomato has been valued at over $1 billion<\/a> \u2014 <a target=\"_blank\" href=\"https:\/\/techcrunch.com\/2016\/05\/09\/zomato-demicorn\/\" rel=\"noopener noreferrer\">though some disagree on that<\/a> \u2014 and it is fair to say that it doesn\u2019t have any excuses for a lax security system since it has raised over $240 million from investors to date.<\/p>\n","protected":false},"excerpt":{"rendered":"<p><img loading=\"lazy\" decoding=\"async\" width=\"680\" height=\"297\" src=\"https:\/\/tctechcrunch2011.files.wordpress.com\/2014\/12\/zomato_app1_hi-res-l-2.jpg?w=680\" class=\"attachment-large size-large wp-post-image\" alt=\"\" srcset=\"https:\/\/tctechcrunch2011.files.wordpress.com\/2014\/12\/zomato_app1_hi-res-l-2.jpg?w=680 680w, https:\/\/tctechcrunch2011.files.wordpress.com\/2014\/12\/zomato_app1_hi-res-l-2.jpg?w=150 150w, https:\/\/tctechcrunch2011.files.wordpress.com\/2014\/12\/zomato_app1_hi-res-l-2.jpg?w=300 300w, https:\/\/tctechcrunch2011.files.wordpress.com\/2014\/12\/zomato_app1_hi-res-l-2.jpg 738w\" sizes=\"(max-width: 680px) 100vw, 680px\" \/>&nbsp;Restaurant guide and food delivery service\u00a0Zomato looks like it is getting off lightly after it suffered a hack that compromised personal information belonging to 6.6 million users. The India-based company, which offers\u00a0services in more than 20 countries worldwide,\u00a0set off alarm bells when it revealed\u00a0that a hacker had made off with\u00a017 million user records. That, Zomato said, included&hellip; <a href=\"https:\/\/techcrunch.com\/2017\/05\/18\/restaurant-guide-zomato-got-off-lightly-after-a-hacker-grabbed-6-6m-user-passwords\/?ncid=rss\">Read More<\/a><\/p>\n<div class=\"feedflare\">\n<a href=\"http:\/\/feeds.feedburner.com\/~ff\/Techcrunch?a=vBDyfbDRcTk:MPA9XMPWeko:2mJPEYqXBVI\"><img decoding=\"async\" src=\"http:\/\/feeds.feedburner.com\/~ff\/Techcrunch?d=2mJPEYqXBVI\" border=\"0\"><\/img><\/a> <a href=\"http:\/\/feeds.feedburner.com\/~ff\/Techcrunch?a=vBDyfbDRcTk:MPA9XMPWeko:7Q72WNTAKBA\"><img decoding=\"async\" src=\"http:\/\/feeds.feedburner.com\/~ff\/Techcrunch?d=7Q72WNTAKBA\" border=\"0\"><\/img><\/a> <a href=\"http:\/\/feeds.feedburner.com\/~ff\/Techcrunch?a=vBDyfbDRcTk:MPA9XMPWeko:yIl2AUoC8zA\"><img decoding=\"async\" src=\"http:\/\/feeds.feedburner.com\/~ff\/Techcrunch?d=yIl2AUoC8zA\" border=\"0\"><\/img><\/a> <a href=\"http:\/\/feeds.feedburner.com\/~ff\/Techcrunch?a=vBDyfbDRcTk:MPA9XMPWeko:-BTjWOF_DHI\"><img decoding=\"async\" src=\"http:\/\/feeds.feedburner.com\/~ff\/Techcrunch?i=vBDyfbDRcTk:MPA9XMPWeko:-BTjWOF_DHI\" border=\"0\"><\/img><\/a> <a href=\"http:\/\/feeds.feedburner.com\/~ff\/Techcrunch?a=vBDyfbDRcTk:MPA9XMPWeko:D7DqB2pKExk\"><img decoding=\"async\" src=\"http:\/\/feeds.feedburner.com\/~ff\/Techcrunch?i=vBDyfbDRcTk:MPA9XMPWeko:D7DqB2pKExk\" border=\"0\"><\/img><\/a> <a href=\"http:\/\/feeds.feedburner.com\/~ff\/Techcrunch?a=vBDyfbDRcTk:MPA9XMPWeko:qj6IDK7rITs\"><img decoding=\"async\" src=\"http:\/\/feeds.feedburner.com\/~ff\/Techcrunch?d=qj6IDK7rITs\" border=\"0\"><\/img><\/a>\n<\/div>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/feeds.feedburner.com\/~r\/Techcrunch\/~4\/vBDyfbDRcTk\" height=\"1\" width=\"1\" alt=\"\"\/> <\/p>\n","protected":false},"author":5817,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","footnotes":""},"categories":[25],"tags":[59,66,26],"class_list":["post-341378","post","type-post","status-publish","format-standard","hentry","category-technology","tag-media","tag-techcrunch","tag-technology"],"_links":{"self":[{"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/posts\/341378","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/users\/5817"}],"replies":[{"embeddable":true,"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/comments?post=341378"}],"version-history":[{"count":0,"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/posts\/341378\/revisions"}],"wp:attachment":[{"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/media?parent=341378"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/categories?post=341378"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/tags?post=341378"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}