NetSe.in Data Breach Exposes Over 128,000 Records

A significant data breach has struck NetSe.in, a prominent online grocery service in India. On January 16, 2025, a moderator known as "888" on the notorious BreachForums announced the leak, exposing sensitive data of customers and uploading it for public download. The breach has revealed detailed information about the company's customers, sparking concerns about privacy and data security.

Background on NetSe.in

NetSe.in is a one-stop online platform providing household necessities, including fresh fruits, vegetables, groceries, and personal care products. Known for its widespread reach and convenience, the service caters to a large customer base in India. Its reputation as a reliable online grocery supplier has made it a preferred choice for households across the country. However, its data security practices have now come under scrutiny following this breach.

Details of the Breach

According to the post made by "888" on BreachForums, NetSe.in's database suffered a breach in January 2025, resulting in the exposure of approximately 128,000 rows of sensitive data. The leaked data includes:

• Complete addresses
• Item details
• Quantity
• Unit prices
• Total transaction amounts
• Order numbers
• Customer phone numbers
• Customer names
• User IDs

A sample of the compromised data was shared on the forum, showcasing the extent of information now in public circulation. The post provides an example of structured rows containing sensitive details, including full customer addresses and phone numbers.

Implications and Concerns

The leaked data poses several risks to NetSe.in customers, including:

1. Identity Theft: The availability of personal identifiers such as full names, addresses, and phone numbers makes customers vulnerable to identity theft.
2. Phishing Attacks: Threat actors can exploit the exposed information to craft targeted phishing schemes, potentially tricking customers into revealing further sensitive details such as banking information.
3. Reputational Damage: For NetSe.in, this breach undermines trust in its platform and raises questions about its data protection measures.

NetSe.in’s Responsibility

As of now, NetSe.in has not issued an official statement addressing the breach. It remains unclear whether the company was aware of the intrusion prior to the public disclosure on BreachForums. However, under data protection regulations such as India's Information Technology Act and proposed Personal Data Protection Bill, the company may be obligated to notify affected users and take measures to mitigate potential harm.

Steps for Affected Users

For customers who may be impacted by the breach, it is advisable to take the following precautions:

1. Monitor Financial Transactions: Keep an eye on bank and credit card statements for any unauthorized transactions.
2. Beware of Phishing Attempts: Do not click on suspicious links or share sensitive information over unsolicited calls or emails.
3. Change Passwords: Update passwords for NetSe.in accounts and any other platforms where the same credentials might have been used.
4. Enable Two-Factor Authentication (2FA): If available, enable 2FA for added security.