Customer emails and phone numbers exposed in massive data breach at Bykea with more than 400 million files leaked

As per a report by Safety Detectives, Bykea بائیکیا had publicly 'exposed 400 million files of Bykea Customer Personal data, Bykea partners (Drivers') personal data' and unencrypted employee login through a security misconfiguration.

The vulnerability was reported on 24th November and was fixed within 24 hours. However, Bykea decided to sweep it under the carpet and decided not to make any information public about the data breach.

Every now and then, Private companies hosting citizens data get breached and such issues are privately fixed and it's shameful that details about these issues are not made public.

If a company hosting citizen data, to maintain trust they should be transparent about any data breaches otherwise users should not to trust them with their personal data and boycott use of such applications.

It is pertinent to mention here that Bykea did suffer another breach in Sep 2020 where-by attackers reportedly wiped out the database, Bykea should issue clarification if the current exposure is anyway related to the Sep 2020 breach.

It is also worth questioning, if a small company size of Bykea would even host 400 million records given the fact that total population of Pakistan is roughly equivalent to 217 million

Technology