Actor claims leak of 55 million V-Trans records in India
A threat actor published a dataset they claim was pulled from a Snowflake environment at V-Trans, one of India's major logistics and parcel-transport providers. The dump reportedly holds about 55 million records, roughly 16 GB of CSV files, covering users, drivers and order details from the V-Trans and V-Express brands. The claim remains unverified.
What happened
A threat actor has published a dataset they claim was taken from V-Trans, a major Indian logistics provider. The alleged haul is about 55 million records of users, drivers and orders, in roughly 16GB of CSV files, offered as a free download. The company has not confirmed the breach.
Why it matters
If genuine, customer and driver personal data plus order history are exposed to anyone. The source's analyst note warns this could fuel delivery-themed phishing and fraud. The claimed Snowflake origin echoes earlier attacks on poorly secured cloud data accounts.
What to do
Watch V-Trans official channels for confirmation and guidance. Teams running Snowflake or other cloud data platforms should review account authentication and access controls. Customers and partners of V-Trans should be alert to fake delivery-themed messages.
For the technical team
- Affected
- V-Trans (India) Ltd. Sistemas da V-Trans (India) Ltd., um dos principais provedores de logística e transporte de encomendas da Índia; base al · V-Trans (India) Ltd.; data across the V-Trans and V-Express brands. No product versions cited.
- Exploitation
- Unverified threat-actor claim reported by DailyDarkWeb. The dump was reportedly posted for free download, per the actor's post. No company confirmation and no mention of active vulnerability exploitation.
- Fix
- Not applicable; no patch cited in the sources. Mitigation suggested by the source's analyst note: review the security of cloud data platform accounts, such as Snowflake.
- Vector
- Access to a V-Trans Snowflake environment, per the actor's claim; the intrusion method was not described. The source links the case to earlier waves of attacks on poorly secured cloud data accounts.
- More details
- About 55 million records in roughly 16GB of CSV files covering users, drivers and order details. Disclosed by the actor and reported by DailyDarkWeb; no public statement from V-Trans so far. The analyst note echoes earlier waves of attacks against poorly secured Snowflake accounts.
Timeline
First appearance of the case: actor posts alleged V-Trans dataset of about 55 million records pulled from a Snowflake environment.
Sources 1 source
- @DailyDarkWeb @DailyDarkWeb
