Hacker Uses Telegram Chatbots to Leak Data of Star Health Insurance

Stolen customer data including medical reports from India's biggest health insurer, Star Health, is publicly accessible via chatbots on Telegram, just weeks after Telegram's founder was accused of allowing the messenger app to facilitate crime.

The purported creator of the chatbots told a security researcher, who alerted Reuters to the issue, that private details of millions of people were for sale and that samples could be viewed by asking the chatbots to divulge.

Star Health and Allied Insurance, whose market capitalization exceeds $4 billion, in a statement to Reuters said it has reported alleged unauthorized data access to local authorities. It said an initial assessment showed "no widespread compromise" and that "sensitive customer data remains secure".

Using the chatbots, Reuters was able to download policy and claims documents featuring names, phone numbers, addresses, tax details, copies of ID cards, test results and medical diagnoses.

The ability for users to create chatbots is widely credited with helping Dubai-based Telegram become one of the world's biggest messenger apps with 900 million active monthly users.

However, the arrest of Russian-born founder Pavel Durov in France last month has increased scrutiny of Telegram's content moderation and features open to abuse for criminal ends. Durov and Telegram denied wrongdoing and are addressing the criticism.

The use of Telegram chatbots to sell stolen data demonstrates the difficulty the app has in preventing nefarious agents taking advantage of its technology and highlights the challenges Indian companies face in keeping their data safe.

The Star Health chatbots feature a welcome message stating they are "by xenZen" and have been operational since at least Aug. 6, said UK-based security researcher Jason Parker.

Parker said he posed as a potential buyer on a online hacker forum where a user under the alias xenZen said they made the chatbots and possessed 7.24 terabytes of data related to over 31 million Star Health customers. The data is free via the chatbot on a random, piecemeal basis, but for sale in bulk form.

Reuters could neither independently verify xenZen's claims nor ascertain how the chatbot creator obtained the data. In an email to Reuters, xenZen said they were in discussions with buyers without disclosing who or why they were interested.

Taken Down

In testing the bots, Reuters downloaded more than 1,500 files with some documents dated as recently as July 2024.

"If this bot gets taken down watch out and another one will be made available in few hours," the welcome message read.

The chatbots were later marked "SCAM" with a stock warning that users had reported them as suspect. Reuters shared details of the chatbots with Telegram on Sept. 16 and within 24 hours spokesperson Remi Vaughn said they had been "taken down" and asked to be informed should more appear.

"The sharing of private information on Telegram is expressly forbidden and is removed whenever it is found. Moderators use a combination of proactive monitoring, AI tools and user reports to remove millions of pieces of harmful content each day."

New chatbots have since appeared offering Star Health data.

Star Health said an unidentified person contacted it on Aug. 13 claiming to have access to some of its data. The insurer reported the matter to the cybercrime department of its home state of Tamil Nadu and federal cyber security agency CERT-In.

"The unauthorized acquisition and dissemination of customer data is illegal, and we are actively working with law enforcement to address this criminal activity. Star Health assures its customers and partners that their privacy is of paramount importance to us," it said in its statement.

In an Aug. 14 stock exchange filing, Star Health, India's biggest player among standalone health insurance providers, said it was investigating an alleged breach of "a few claims data".

Representatives for CERT-In and the Tamil Nadu cybercrime department did not respond to emailed requests for comment.

Unaware

Telegram allows individuals or organizations to store and share large amounts of data behind anonymous accounts. It also lets them create customizable chatbots which automatically provide content and features based on user requests.

Two chatbots distribute Star Health data. One offers claim documents in PDF format. The other allows users to request up to 20 samples from 31.2 million datasets with a single click giving details including policy number, name and even body mass index.

Among documents disclosed to Reuters were records related to the treatment of the one-year-old daughter of policyholder Sandeep TS at a hospital in the southern state of Kerala. The records included diagnosis, blood test results, medical history and a bill of nearly 15,000 rupees ($179).

"It sounds concerning. Do you know how this can affect me?" said Sandeep, confirming the documents' authenticity. He said Star Health had not notified him of any data leak.

The chatbot also leaked a claim last year by policyholder Pankaj Subhash Malhotra which included ultrasound imaging test results, details of illness and copies of federal tax account and national ID cards. He also confirmed the documents were genuine and said he was not made aware of any security breach.

The Star Health chatbots are part of a broader trend of hackers using such methods to sell stolen data. Of five million people whose data was sold via chatbots, India represented the largest number of victims at 12%, showed the latest survey on the epidemic conducted by NordVPN at the end of 2022.

"The fact that sensitive data is available via Telegram is natural, because Telegram is an easy-to-use storefront," said NordVPN cybersecurity expert Adrianus Warmenhoven. "Telegram has become an easier to use method for criminals to interact."

© Thomson Reuters 2024



from Gadgets 360 https://ift.tt/PtNMa2B

Comments

Post a Comment

Popular posts from this blog

COVID-19 origins: Should we pay more attention to the lab leak theory and formally investigate it?

Image
A year and a half into the pandemic, we still do not know exactly where the SARS-CoV-2 virus, which causes Covid-19, came from. The prevailing view so far has been that the virus “spilled over” from bats into humans. But there are increasing calls to investigate the possibility that it emerged from a lab in Wuhan, China, where Covid first appeared at the end of 2019. So what do we know for sure, and what do we need still to find out? We know the sequence of the SARS-CoV-2 virus is close to that of bat coronaviruses . Several decades ago its “ancestor” was circulating in bat populations in southern Asia. But there are still many unanswered questions: we don’t know how the virus arrived in Wuhan, how its sequence evolved to allow human infection, and under what conditions it infected the first people who crossed its path. And for each of these stages, we don’t know whether there was a human contribution (direct or indirect). Zoonotic transmission pathways, in other words the pas
Read more

Menstrual cups are cheaper, more sustainable than pads and tampons for women

Image
Every year in America, women spend at least US$2.8 billion on sanitary pads and tampons that can take hundreds of years to decompose . Is there a more economical and environmentally friendly way? To find out, we asked Susan Powers , a professor of sustainable environmental systems at Clarkson University about her work comparing the environmental impact of tampons, sanitary pads and menstrual cups. What is a menstrual cup? A menstrual cup is a type of reusable feminine hygiene product. It’s a small, flexible bell-shaped cup made of rubber or silicone that a woman inserts into her vagina to catch and collect menstrual fluid. It can be used for up to 12 hours, after which it is removed to dispose of the fluid and cleaned. The cup is rinsed with hot water and soap between each insertion and sterilized in boiling water at least once per period. A cup can last up to 10 years . Although menstrual cups have been around for decades, they historically have been less popular than pads or ta
Read more

Human bodies respond to infections differently depending on the time of day

Image
When microorganisms – such as bacteria or viruses – infect us, our immune system jumps into action. It’s highly trained to sense and eliminate infections and clear up any damage caused by them. It’s typically assumed our immune systems work the exact same way regardless of whether an infection occurs during the day or at night. But research spanning over half a century now shows our bodies actually respond differently at day and night. The reason for this is our body clock, and the fact that each cell in the body, including our immune cells, can tell what time of day it is. Our body clock has evolved over millions of years to help us survive. Every cell in the body has a collection of proteins that indicate the time depending on their levels. Knowing whether it’s day or night means our body can adjust its functions and behaviours (such as when we want to eat) to the correct time. Our body clock does this by generating 24 hour rhythms (also termed circadian rhythms ) in how cells f
Read more