//

The stolen information included user email addresses and hashed passwords

Leading restaurant listing and food ordering platform Zomato announced today that about 17 million of its user records were stolen from its database.  The stolen information included user email addresses and hashed passwords.

The company has, however, said that the payment information or credit card data were not leaked as this data is stored separately in a highly secure compliant vault.

The development comes at a time when the world is going through a massive ransomware attack, which infected over 45,000 computers in 99 countries.

Also Read: Zomato launches cloud-based POS system for Indian restaurants

“The reason you’re reading this blog post is because of a recent discovery by our security team — about 17 million user records from our database were stolen,” Zomato said. “…payment related (credit card) information on Zomato is stored separately from this (stolen) data in a highly secure PCI Data Security Standard (DSS) compliant vault. No payment information or credit card data has been stolen/leaked.”

“As a precaution, we have reset the passwords for all affected users and logged them out of the app and website. Our team is actively scanning all possible breach vectors and closing any gaps in our environment. So far, it looks like an internal (human) security breach — some employee’s development account got compromised,” it said. “We’ll be further enhancing security measures for all user information stored within our database. A layer of authorisation will be added for internal teams having access to this data to avoid the possibility of any human breach.”

Also Read: Zomato ID Country Manager: “We have already reached break-even in 6 countries”

Started in 2008, Zomato is a restaurant search and discovery app, providing in-depth information for over 1.4 million restaurants over 23 countries. Zomato is used by consumers globally to discover, rate and review restaurants, as well as create their own personal network of foodies for trusted recommendations.

In addition to restaurant search and discovery, Zomato also offers online ordering, table reservations, a Whitelabel Platform. The firm claims over 120 million users visit Zomato every month.

In September 2014, Zomato raised US$60 million in a funding led by Singapore-based Temasek Holdings, with participation from existing investor Vy Capital.

In October 2015, Zomato had decided to let go of around 300 employees or 10 per cent of it total workforce as part of restructuring.

The post Zomato says 17 million of its user data leaked; payments information safe appeared first on e27.

from e27 http://ift.tt/2ru375s