Shadowfax claimed to be hacked

TechCrunch reports that major Indian on-demand third-party logistics startup Shadowfax had five million users' records claimed to be stolen by a threat actor following a cyberattack this month. Data allegedly stolen included users' mobile numbers, pickup and delivery statuses, and order tracking identifiers, according to the hacker, who has demanded an undisclosed amount for the sale of such information in a cybercrime forum listing. Other details on how the data was compromised remain unknown. Independent verification of the stolen data conducted by TechCrunch revealed that the exfiltrated tracking identifiers yielded valid results when tested through the order tracker of Shadowfax but a succeeding search returned an error message noting the invalidity of the identifiers. Meanwhile, Shadowfax co-founder and Chief Technology Officer Vaibhav Khandelwal, who received a copy of the stolen data from TechCrunch, noted that an investigation into the validity of the data and suspicious network activity is still ongoing.