A threat actor named JumboJet has claimed responsibility for breaching the database of Sewacity Foods, India’s food delivery platform. The alleged breach, disclosed on BreachForums, reportedly exposed the sensitive information of about 5,000 customers.
The compromised data includes names, email addresses, phone numbers, physical addresses, and order histories. Additionally, the breach is said to have affected 30,000 orders, potentially exposing transaction details.
More alarmingly, administrative data, payment records, and internal business analytics related to restaurant partners were also allegedly leaked
A sample of the leaked data was shared on the forum, though it remains unclear whether the entire dataset has been made publicly available or is being sold privately.
The breach could have serious implications for victims’ privacy and security. Threat actors can also use the exposed data for other campaigns. For instance, scammers can use the data for phishing and other frauds.
Sewacity users are advised to change their passwords and monitor their emails and phones for unsolicited contact. They must also report any unwanted bank withdrawals from their accounts to the relevant authorities.
Indian firms are a prime target of hackers primarily due to their large databases. Last month, the edtech firm SkilloVilla was breached, affecting several thousand users. Similarly, other companies in this sector, such as Physics Wallah (PW), and Wissenhive were also compromised.
Online betting platform Cricadda also suffered a data breach exposing sensitive information of more than 100,000 users. Indian insurance company Let’s Secure also suffered a ransomware attack in January 2025.
Another sector where threat actors can access sensitive information is the healthcare sector, particularly hospitals. The Space Bears cybercrime group targeted a prominent hospital in India, Bethany Hospital.
India’s critical infrastructure, including telecommunications, is currently facing cyber-attacks. A notable incident occurred in January when Indus Towers, one of India’s largest tower manufacturing companies, fell victim to a ransomware attack by the Medusa group. The hackers demanded a ransom of half a million dollars.
In the News: Massive Chrome supply chain attack hits 16 extensions, 3.2M users
