Star Health and Allied Insurance Details

    Organization Logo

    Star Health and Allied Insurance

    Chennai • 10000 employees • Healthcare

    https://www.starhealth.in/
    India

    Industry

    Healthcare

    Security Incidents

    1

    Star Health and Allied Insurance Co Ltd is a private health insurance company based in India. Founded in 2006, it primarily focuses on providing health insurance solutions, which include individual health policies, family floater policies, and group health insurance plans. The company has established a wide network of customer service centers and a large hospital network for cashless treatments.

    Over the years, Star Health and Allied Insurance has introduced several innovative insurance products, catering to the specific needs of different customer segments. Notable achievements include stron...
    Show more

    Security Incidents

    Star Health and Allied Insurance Breach of Sep 2024
    Severity Score
    Significant to High

    Type

    Data Breach

    Summary

    On September 20, 2024, India’s largest standalone health insurer, Star Health and Allied Insurance, experienced a significant data breach. The incident was first flagged by UK-based cybersecurity researcher Jason Parker, who discovered that sensitive customer data, including names, addresses, phone numbers, policy details, government ID numbers, and medical information, had been leaked via chatbots on Telegram. Using the alias “xenZen,” a hacker offered small portions of approximately 7.24 terabytes of data for free while selling bulk data.

    The chatbots had been active since at least August 6...
    Show more

    Severity

    The Star Health and Allied Insurance data breach is a significant incident that exposed over 31 million customers' sensitive data, including names, addresses, phone numbers, policy details, government ID numbers, and medical information. The breach, made accessible through Telegram chatbots and sold on platforms like BreachForums, underscores the sophistication and persistence of modern cybercriminals. Despite Star Health's initial downplaying of the incident, subsequent investigations revealed the widespread availability of stolen data, questioning the company's transparency and response effi...
    Show more

    Impact

    The recent cyber incident at Star Health and Allied Insurance, India's largest standalone health insurer, was a massive data breach. This breach compromised an enormous 7.24 terabytes of sensitive customer data, encompassing names, addresses, phone numbers, policy details, government ID numbers, and highly sensitive medical information such as test results and diagnoses. This extensive dataset has been circulated on various platforms, including Telegram chatbots and BreachForums, where threat actors are offering it both for free in small samples and for sale in bulk.

    As a result, the personal...
    Show more

    KEEP YOUR ENVIRONMENT SECURE

    Weak credentials are the leading cause of breaches. Beyond Identity can help.

    See MFA exploits in action
    Watch how adversaries exploit companies in quick videos