Data broker exposure of Indian executives: how leaked personal data becomes an entry point into your network
Your CFO’s personal mobile number, home address, and spouse’s name are almost certainly available for purchase right now. The buyer does not need a dark web contact. A people-search site with a card payment page and a published privacy policy will supply most of it, and that package is where a growing share of attacks on Indian enterprises begins.
Security teams generally file executive personal data under someone else’s remit, usually HR’s or the individual’s own. The attack chain ignores that filing decision. Given a verified mobile number and a handful of biographical details, an attacker can attempt a SIM swap with the carrier. A successful swap hands them SMS-based second factors, which hands them the executive’s email, which hands them approval authority over payments, vendor bank detail changes, and access requests. Nothing in that sequence requires touching your network.
The raw material is easier to assemble than most IT...
Copyright of this story solely belongs to itvoice.in. To see the full text click HERE
