Data leak at Indian Star Health; Cloudflare denies involvement – News

Published: Sunday, September 29, 2024, 11:09 am

US software company Cloudflare has denied any role in hosting two websites run by a hacker offering for sale stolen personal data and medical records of clients of India’s leading insurer Star Health.

The statement comes after the company became involved in an Indian lawsuit filed last week by Star Health, in which the insurer alleged that Cloudflare hosted the websites in question.

“Cloudflare is not a host for the domains in question,” the company told Reuters, adding that it acts as a relay service between the website host and the end user, which is why you can see Cloudflare’s IP address.

Stay up to date with the latest news. Follow KT on WhatsApp channels.

Star also sued Telegram and self-proclaimed hacker XenZen after reports that sensitive personal information, from phone numbers to copies of ID cards and customer blood results, was publicly available through Telegram chatbots.

Telegram websites and bots were unavailable on Sunday.

Star did not immediately respond to a request for comment outside normal business hours in India.

Earlier, Star said an initial assessment found “no widespread compromise,” adding that sensitive customer data remains safe.

The company received an interim injunction from a court in its southern state of Tamil Nadu, ordering Telegram and the hacker to block all chatbots and websites sharing data online in India.

Last week, Telegram reported that any newly created bots attempting to share this data were likely removed as a result of a massive sweep of searchable content.

READ ALSO: