TMCnet Feature Free eNews Subscription
June 28, 2011

Groupon's Indian Subsidiary SoSasta's User Database Published to the Internet

By Tracey E. Schelmetic, TMCnet Contributor

Eventually, everybody gets a turn at an embarrassing internal data breach. Today, it’s Groupon’s turn. The popular deal-of-the-day Web site’s Indian subsidiary SoSasta has reportedly accidentally published its entire user database to the Internet. It was then indexed by Google (News - Alert).

The Web site RiskyBiz (http://risky.biz/sosasta) has reported that the leaked database includes some personal information for about 300,000 users, including e-mail addresses and clear-text (as opposed to encrypted) passwords. The breach was discovered by Australian security consultant Daniel Grzelak as he searched for publicly accessible databases containing e-mail address and password pairs, reported RiskyBiz’s Patrick Gray. Grzelak used Google to search for SQL database files that were Web accessible and contained keywords like “password” and “gmail.”

“A few hours and tweaks later, this database came up,” said Grzelak “I started scrolling, and scrolling and I couldn’t get to the bottom of the file. Then I realized how big it actually was.”

In response, Groupon is encouraging SoSasta users to immediately change their user names and passwords, and has assured them that no financial information was compromised in the breach because none is stored on the site, reported TechCrunch.

SoSasta works in a similar manner to Groupon, offering localized daily discounts on products and services. The site can be customized for residents of most of India’s major cities, including Kolkata, Mumbai, Bangalore, Chennai, Delhi, Pune, Hyderabad, Nagpur, Chandigarh, Jaipur and Ahmedabad. The site’s name is derived from a clever wordplay: “Sasta” means “cheap” in Sanskrit, so “SoSasta” basically translates to “That’s so cheap!”

Groupon says it has launched an internal investigation over the incident.

(Important note: while RiskyBiz is reporting that the breach was an accident, TechCrunch is reporting it as a deliberate hack.)

Want to learn more about the latest in communications and technology? Then be sure to attend ITEXPO West 2011, taking place Sept. 13-15, 2011, in Austin, Texas. ITEXPO (News - Alert) offers an educational program to help corporate decision makers select the right IP-based voice, video, fax and unified communications solutions to improve their operations. It’s also where service providers learn how to profitably roll out the services their subscribers are clamoring for – and where resellers can learn about new growth opportunities. To register, click here.



Tracey Schelmetic is a contributing editor for TMCnet. To read more of Tracey's articles, please visit her columnist page.

Edited by Jennifer Russell
» More TMCnet Feature Articles
Get stories like this delivered straight to your inbox. [Free eNews Subscription]
SHARE THIS ARTICLE

LATEST TMCNET ARTICLES

» More TMCnet Feature Articles