2.9 Million Records Exposed in Dark Web Leak

Published:

Recent BSNL Data Breach Raises Concerns and Questions

In a shocking turn of events, the specter of a potential data breach at Bharat Sanchar Nigam Limited (BSNL) has once again reared its head, sending ripples of concern throughout the Indian telecommunications sector. The saga began in late 2023 when rumors of a breach at the state-owned telecom giant first surfaced, only to be dismissed by BSNL at the time. However, recent developments have reignited fears as data allegedly from the unconfirmed breach has resurfaced on the dark web.

On April 24, 2024, a notorious threat actor known as ‘Perell’ released a database containing over 2.9 million records, purportedly belonging to BSNL. This database, initially part of an extortion scheme, was shared on the now-defunct BreachForums. Perell had previously claimed to possess sensitive BSNL data in December 2023, threatening to use it against the company.

The reemergence of this data, now made public by Perell, has raised serious concerns about user privacy and the security implications for BSNL’s customers. The leaked information includes sensitive data from the telecom giant, underscoring the potential risks posed by the breach.

Experts have warned of far-reaching consequences, with the breach potentially leading to identity theft and fraud for millions of individuals. Despite the gravity of the situation, BSNL has yet to confirm the breach, leaving the claims unverified. The Cyber Express has reached out to BSNL for comment, but as of now, no official statement has been issued.

The reappearance of data from the alleged 2023 breach has once again thrust BSNL into the spotlight, highlighting the urgent need for enhanced cybersecurity measures in the face of evolving threats. Stay tuned for updates on this developing story as more information becomes available.

CHAPTER X // CYBER AWARENESS CAMPAIGN
BEYOND THE BALLROOM
[C://ME] // CHAPTER X

REQUEST THE MEDIA KIT

Tell us where to send the Beyond the Ballroom media deck. Every field is required.

We will use these details to respond to your media-kit request. Privacy Policy

Cyber Warriors Conclave Chapter X — Beyond the Ballroom

Related articles

Recent articles

Arista Networks VeloCloud Orchestrator vulnerable to CVE-2026-114625, exploited in the wild

Arista Networks has reported a critical vulnerability, CVE-2026-114625, affecting its VeloCloud Orchestrator (VCO) products, with confirmed exploitation in the wild as of October 22,...

Hackers reportedly exploited PHP vulnerabilities days before public patch release

Recent findings reveal that hackers began exploiting critical vulnerabilities in PHP, known as PHP2Shell, four days before the public patch release on October 21....

New BlackX UEFI bootkit exploits Baton Drop vulnerability in targeted APT campaign

In early 2026, researchers identified a new UEFI bootkit, dubbed BlackX, that exploits the Baton Drop vulnerability (CVE-2022-21894) in a targeted APT campaign against...

Mirai botnet operators attempt to exploit PHP2Shell vulnerabilities, no confirmed breaches reported

In a concerning development, operators of the Mirai botnet have begun attempting to exploit critical vulnerabilities in PHP2Shell, following the release of emergency patches...