Star Health Details

    Organization Logo

    Star Health

    Chennai, Tamil Nadu • 12869 employees • Insurance

    https://www.starhealth.in
    India

    Industry

    Insurance

    Security Incidents

    1

    Star Health and Allied Insurance Co Ltd, commonly referred to as Star Health, is one of the leading health insurance companies in India. The company was established in 2006 and has since grown into a prominent player in the health insurance sector. Its primary purpose is to offer a range of health insurance products to individuals, families, and corporate clients, providing financial protection against medical expenses.

    Over the years, Star Health has achieved several milestones, including being recognized for its diverse product offerings and customer-centric services. The company provides a...
    Show more

    Security Incidents

    Star Health Breach of Oct 2024
    Severity Score
    High

    Type

    Insider Threat

    Summary

    In October 2024, Star Health and Allied Insurance Company in India experienced a significant data breach involving over 31 million customer records. The breach exposed 7.24 terabytes of sensitive information including personal identifiers, medical reports, and insurance claims. Allegedly, the data was leaked through self-hosted platforms initiated by a hacker named "xenZen," who claimed to have received the data with the complicity of Star Health's Chief Information Security Officer (CISO), Amarjeet Khanuja.

    The data leak first became evident in August 2024 when chatbots on Telegram were util...
    Show more

    Severity

    The cyberattack against Star Health and Allied Insurance Company was a major security event, as hackers accessed and leaked over 31 million customer records containing sensitive personal and medical information. Allegations emerged that the company's Chief Information Security Officer might have been complicit in the data's sale, which adds serious concerns around internal security and governance at Star Health. Despite the company stating their operations were not disrupted, the exposure of 7.24 terabytes of data has raised alarming questions about the effectiveness of their data protection m...
    Show more

    Impact

    The Star Health cyber incident in 2024 was marked by a significant data breach involving unauthorized and illegal access to sensitive customer information, resulting in over 31 million records being compromised. The breach was allegedly facilitated by an internal figure, with accusations pointing towards the company's Chief Information Security Officer, who purportedly sold sensitive data, including personal details and medical records, to a threat actor identified as "xenZen." The exposed data contained comprehensive personal information and medical history, raising severe concerns about Star...
    Show more

    KEEP YOUR ENVIRONMENT SECURE

    Weak credentials are the leading cause of breaches. Beyond Identity can help.

    See MFA exploits in action
    Watch how adversaries exploit companies in quick videos