[Posting for awareness] Emails, hashed passwords of 18 million Ixigo users stolen

Old news, if it is repost, please delete it..

BENGALURU: User data of 18 million, largely email IDs and hashed passwords, were allegedly stolen from online travel aggregation platform Ixigo. This is part of a broader data steal that saw user information being leaked from seven other global sites, including home improvement website Houzz.

Ixigo founder and CEO Aloke Bajpai told TOI the company will issue a notification to its users to reset their passwords as a safety measure. British news platform The Register first reported the data leak. Backed by China’s Fosun, Ixigo had over 20 million monthly active users in November last year. A company spokesperson said it had nearly 100 million users in total.

“Ixigo is currently investigating this alleged security breach. We are a travel marketplace and we take our users’ data and privacy seriously. We do not store payment, cards or financial information for any of our users. We encrypt and hash our passwords with a one-way hashing algorithm. While we have already taken pre-emptive security measures, such as two-factor authentication, we will also, as a precaution, reset passwords and security tokens of our users,” Bajpai said in a statement.

Full article here..
https://timesofindia.indiatimes.com/business/in...