Bharatpedia - User contributions [en]

Sourajeet Majumder

2021-08-08T19:08:59Z

Bharatcontributor1234: /* 3. Alleged Moneycontrol Data Breach: */Fixed punctuation

{{AFC submission/draft}}

{{AfC submission|||ts=20210808181334|u=Bharatcontributor1234|ns=118}}
= Sourajeet Majumder =
{{Infobox person
| name = Sourajeet Majumder
| image = Sourajeet's Picture.jpg
| birth_date = {{birth-date and age|24 September 2003}}
| birth_place = [[Siliguri]], [[West Bengal, India]]
| occupation = Security Researcher, Cyber Expert, Ethical Hacker
}}

'''Sourajeet Majumder''' (born 24 September 2003) is an Indian Ethical Hacker, Security Researcher and Cyber Expert. Till date Majumder has helped securing multiple Indian Government sites.<ref>{{Cite journal|last=NCIIPC Acknowledging Majumder|date=July 2019|title=NCIIPC Newsletter July 2019|url=https://nciipc.gov.in/documents/NCIIPC_Newsletter_July19.pdf|journal=[[NCIIPC]]}}</ref><ref>{{Cite journal|last=NCIIPC Acknowledging Majumder|first=|date=October 2019|title=NCIIPC Newsletter October 2019|url=https://nciipc.gov.in/documents/NCIIPC_Newsletter_Oct19.pdf|journal=[[NCIIPC]]}}</ref>, MNCs<ref>{{Cite web|last=|title=Apple Web Server Notification|url=https://support.apple.com/en-in/HT201536|url-status=live|website=[[Apple Inc]]}}</ref><ref>{{Cite web|last=|title=Bughunter Hall Of Fame|url=https://bughunter.withgoogle.com/profile/ceaef5f4-43c8-44cd-b5c9-455c8cf69e91|url-status=live|website=[[Google]]}}</ref>, Universities<ref>{{Cite web|last=|title=Drexel's Bug Bounty Program|url=https://drexel.edu/it/security/services-processes/bug-bounty/|url-status=live|website=[[Drexel University]]}}</ref><ref name=":0">{{Cite news|last=|title=কেমব্রিজকে বাঁচাল শহরের সৌরজিৎ|work=[[Anandabazar Patrika]]|url=https://www.anandabazar.com/west-bengal/boy-of-siliguri-finds-out-security-threat-in-cambridge-university-website-1.1041195}}</ref> besides many other organizations. He is currently one of the youngest Ethical Hacker in India<ref>{{Cite news|title=Warding off hackers: Bug bounty hunters working to keep firms cyber secure|work=[[Business Standard]]|url=https://www.business-standard.com/article/technology/warding-off-hackers-bug-bounty-hunters-working-to-keep-firms-cyber-secure-121060901597_1.html}}</ref>.

Sourajeet first came into the limelight after pointing out a highly critical vulnerability<ref name=":1">{{Cite news|last=|title=Over 8 million COVID-19 test results leaked online|work=[[Bleeping Computer]]|url=https://www.bleepingcomputer.com/news/security/over-8-million-covid-19-test-results-leaked-online/}}</ref><ref name=":2">{{Cite news|title=Indian state government website exposed COVID-19 lab test results|work=[[TechCrunch]]|url=https://techcrunch.com/2021/03/03/india-west-bengal-health-covid-security/}}</ref><ref>{{Cite news|title=WB govt website leaks lab results of millions of corona patients|work=[[IMDb]]|url=https://www.imdb.com/news/ni63216996}}</ref><ref name=":3">{{Cite news|title=Health Website Leaks 8 Million COVID-19 Test Results|url=https://threatpost.com/health-website-leaks-covid-19-test/164274/}}</ref><ref>{{Cite news|title=Exclusive {{!}} West Bengal Health Dept Left Over 1 Lakh Covid-19 Reports Exposed to Public Search|work=[[News18]]|url=https://www.news18.com/news/tech/west-bengal-health-dept-1-lakh-covid-19-reports-exposed-3448106.html}}</ref><ref name=":4">{{Cite news|title=কোভিড আক্রান্তদের তথ্য ফাঁস! স্বীকার করলেন স্বাস্থ্য আধিকারিক|work=[[TV9 Bangla]]|url=https://tv9bangla.com/west-bengal/jalpaiguri/siliguri-student-alleged-to-data-leak-of-west-bengal-corona-patients-332532.html}}</ref><ref>{{Cite news|title=করোনা পরীক্ষা করিয়েছিলেন? আপনার ব্যক্তিগত তথ্য যেতে পারে হ্যাকারদের হাতে|work=[[Ei Samay Sangbadpatra]]|url=https://eisamay.indiatimes.com/west-bengal-news/kolkata-news/a-class-xi-student-claimed-hackers-could-steal-information-from-the-state-health-departments-website/articleshow/81180161.cms}}</ref> in the official government website of [[Ministry of Health & Family Welfare (West Bengal)]] and since then he has been found actively contributing towards online security<ref name=":5">{{Cite news|title=Indian news portal's server breach exposes 40mn users; hackers selling 700K records for $350|work=[[International Business Times]]|url=https://www.ibtimes.co.in/indian-news-portals-server-breach-exposes-40mn-users-hackers-selling-700k-records-350-835112}}</ref><ref>{{Cite news|title=Vaccine Registration Targeted by Fake Apps: How to Stay Safe?|work=[[The Quint]]|url=https://www.thequint.com/tech-and-auto/vaccine-registration-targeted-by-fake-apps-how-to-stay-safe}}</ref><ref>{{Cite news|title=Pegasus Zero-Click Attack: How Does It Infect Phones? Which Device is Safe?|work=[[The Quint]]|url=https://www.thequint.com/tech-and-auto/zero-click-attacks-how-does-it-infect-phones-which-device-is-safer}}</ref><ref>{{Cite news|title=Privacy Analysis: How Much Of Your Data Do Popular Apps Share?|work=[[The Quint]]|url=https://www.thequint.com/tech-and-auto/privacy-analysis-how-much-of-your-data-do-popular-apps-share}}</ref><ref>{{Cite news|title=Domino's India Hack: 7 Years of Internal Docs, 10 Lakh Credit Cards on Sale for Rs 3.4 Crore|work=[[News18]]|url=https://www.news18.com/news/tech/dominos-india-hack-7-years-of-internal-docs-10-lakh-credit-cards-on-sale-for-rs-3-4-crore-3655799.html}}</ref> and fighting disinformation<ref>{{Cite news|title=LinkedIn's Data 'Scraped' Not 'Breached': Cyber Security Expert|work=[[The Quint]]|url=https://www.thequint.com/tech-and-auto/linkedin-data-breach-exposes-personal-data-of-92-percent-users}}</ref><ref>{{Cite news|title=How Cybercriminals Sell Fake Data and Fall for It Too|work=[[The Quint]]|url=https://www.thequint.com/tech-and-auto/cybercrime-fake-data-breach-on-the-rise}}</ref> in the the cyber space.

== Life ==
[[File:Sourajeet's_Interview_With_Siliguri_Times.jpg|left|thumb|266x266px|Majumder in an interview with [https://siliguritimes.com Siliguri Times]]]
Sourajeet was born and brought up in [[Siliguri]], a small city in [[West Bengal]]<ref name=":0" />. From a very early age, he was attracted towards technology and was often found meddling with computers and other electronic gadgets<ref name=":4" />. It was in his early school days that he first came across the word "Hacking" while searching for ways to crack the password of his brother's android device. By using a simple ‘Brute-force’ tool, which was available for free on the Internet, he managed to unlock the device. This incident helped him to dive deep into the field. Soon Majumder realized that he could use his skills for social good. At the age of 16, he bagged his first Bug bounty reward from Tumblr<ref>{{Cite news|title=সোশাল মিডিয়ার ভুল ধরে অ্যামেরিকার সংস্থার পুরস্কার পেল কিশোর|work=[[ETV]]|url=https://www.etvbharat.com/bengali/west-bengal/state/darjeeling/siliguri-student-awarded-to-find-out-tumblr-bug/wb20191002170917050}}</ref>.

== Recent Works ==
=== 1. Leakage Of Covid-19 Test Reports: ===
In February 2021, Majumder claimed that he had discovered a highly critical vulnerability in the official website of Ministry of Health & Family Welfare (West Bengal) which if exploited could have resulted in the leakage of over 8 Million Covid-19 Test Reports<ref name=":1" />. According to Majumder, after discovering the flaw he quickly communicated with the [[Indian Computer Emergency Response Team|CERT-IN]] who acknowledged the breach to Majumder<ref name=":2" />. Sourajeet also claimed that he had reached out to the system coordinator, who manages the website but didn't receive any response from him. However, according to a media report<ref name=":4" /> few days after the incident, a government-appointed health official acknowledged the flaw and said it would be fixed immediately<ref name=":3" />. Later reports published by [https://en.wikipedia.org/wiki/Bleeping_Computer Bleeping Computer]<ref name=":1" /> and [https://en.wikipedia.org/wiki/TechCrunch TechCrunch]<ref name=":2" /> shared that the vulnerability was fixed and could no longer be exploited.

=== 2. Students Data Leaked Online: ===
In March 2021, Sourajeet claimed that PII data of thousands of Indian students could be easily accessed by a simple Google search technique<ref name=":6">{{Cite news|title=Data of 100,000 Indian Students Leaked Online, Claims Researcher|work=[[The Quint]]|url=https://www.thequint.com/tech-and-auto/data-of-100000-indian-students-leaked-online-claims-researcher#read-more}}</ref>. According to him this data was getting leaked from multiple websites belonging to educational institutes and from publicly uploaded documents on Scribd<ref name=":6" />. Majumder claims to have discovered the data of many private schools, college and university students which included students' names, parents' names, phone numbers, email addresses and Aadhar card numbers<ref name=":6" />.

Later in July 2021 similar concerns regarding the leakage and sale of Indian student's data was brought up the [https://en.wikipedia.org/wiki/Internet_Freedom_Foundation Internet Freedom Foundation]<ref>{{Cite news|title=EXPLAINED: HOW THE STUDENT DATA BREACH LEAVES MINORS VULNERABLE TO SEVERAL THREATS|work=[[Firstpost]]|url=https://www.firstpost.com/tech/news-analysis/explained-how-the-student-data-breach-leaves-minors-vulnerable-to-several-threats-9839511.html}}</ref><ref>{{Cite web|title=Securing Examination Data: No Child’s Play|url=https://internetfreedom.in/securing-examination-data-no-childs-play-untitled/amp/|url-status=live|website=[[Internet Freedom Foundation]]}}</ref>

=== 3. Alleged Moneycontrol Data Breach: ===
In April 2021, Majumder tweeted that personal data of over 7 lakh registered users of Moneycontrol were available on a hacker's forum for just $350.<ref name=":5" /><ref name=":8">{{Cite news|title=Moneycontrol Resets Passwords En Masse After Alleged Data Breach Impacting 7 Lakh Users|work=[[Inc42]]|url=https://inc42.com/buzz/moneycontrol-resets-passwords-en-masse-after-alleged-data-breach/}}</ref><ref name=":7">{{Cite news|title=Moneycontrol.com data breach: Personal details of over seven lakh users up for sale on Hackers forums – Here is what we know so far|work=[[OpIndia]]|url=https://www.opindia.com/2021/04/personal-details-of-over-seven-lakh-moneycontrol-users-up-for-sale/}}</ref>. According to him the leaked data consisted of user emails and plain text passwords besides other details<ref name=":8" /><ref name=":7" />. Majumder further claimed that he was able to verify the login credentials which the hackers had shared as sample. This received a lot of attention and the Chief Technology Officer of Network18 replied to the tweet thread calling it an old data set with which Majumder highly disagreed<ref name=":7" />. A couple of days later it was found that a lot of users received a password change mail from Moneycontrol<ref name=":8" /> which Majumder in a press report called "a sneaky way" of asking users to change their passwords, without letting them know about the breach<ref name=":8" /><ref name=":5" />

Later in the month of May, [https://en.wikipedia.org/wiki/Troy_Hunt Troy Hunt] appreciated the [https://twitter.com/troyhunt/status/1396236899136655364?s=20 efforts]made by Majumder in bringing this breach out and added the leaked data set as a part of [https://en.wikipedia.org/wiki/Have_I_Been_Pwned%3F Have I Been Pwned]<ref>{{Cite web|title=have i been pwned?|url=https://haveibeenpwned.com/PwnedWebsites#Moneycontrol|url-status=live}}</ref>

== References ==
{{Reflist}}

== External links ==
{{commonscatinline}}

* [https://www.facebook.com/sourajeet.majumder.56 Official Facebook]
* [https://twitter.com/TechCrucio Official Twitter]

{{authority control}}

{{DEFAULTSORT:Sourajeet, Majumder}}
[[:Category:2003 births]]
[[:Category:Living people]]
[[:Category:Bengali people]]
[[:Category:Hackers]]
[[:Category:Security breaches]]
[[:Category:Cyber Security in India]]
[[:Category:Security Researcher]]
[[:Category:Technology]]

Sourajeet Majumder

2021-08-08T19:05:10Z

Bharatcontributor1234: /* Recent Works */Removed a dead link of an image file

{{AFC submission/draft}}

{{AfC submission|||ts=20210808181334|u=Bharatcontributor1234|ns=118}}
= Sourajeet Majumder =
{{Infobox person
| name = Sourajeet Majumder
| image = Sourajeet's Picture.jpg
| birth_date = {{birth-date and age|24 September 2003}}
| birth_place = [[Siliguri]], [[West Bengal, India]]
| occupation = Security Researcher, Cyber Expert, Ethical Hacker
}}

'''Sourajeet Majumder''' (born 24 September 2003) is an Indian Ethical Hacker, Security Researcher and Cyber Expert. Till date Majumder has helped securing multiple Indian Government sites.<ref>{{Cite journal|last=NCIIPC Acknowledging Majumder|date=July 2019|title=NCIIPC Newsletter July 2019|url=https://nciipc.gov.in/documents/NCIIPC_Newsletter_July19.pdf|journal=[[NCIIPC]]}}</ref><ref>{{Cite journal|last=NCIIPC Acknowledging Majumder|first=|date=October 2019|title=NCIIPC Newsletter October 2019|url=https://nciipc.gov.in/documents/NCIIPC_Newsletter_Oct19.pdf|journal=[[NCIIPC]]}}</ref>, MNCs<ref>{{Cite web|last=|title=Apple Web Server Notification|url=https://support.apple.com/en-in/HT201536|url-status=live|website=[[Apple Inc]]}}</ref><ref>{{Cite web|last=|title=Bughunter Hall Of Fame|url=https://bughunter.withgoogle.com/profile/ceaef5f4-43c8-44cd-b5c9-455c8cf69e91|url-status=live|website=[[Google]]}}</ref>, Universities<ref>{{Cite web|last=|title=Drexel's Bug Bounty Program|url=https://drexel.edu/it/security/services-processes/bug-bounty/|url-status=live|website=[[Drexel University]]}}</ref><ref name=":0">{{Cite news|last=|title=কেমব্রিজকে বাঁচাল শহরের সৌরজিৎ|work=[[Anandabazar Patrika]]|url=https://www.anandabazar.com/west-bengal/boy-of-siliguri-finds-out-security-threat-in-cambridge-university-website-1.1041195}}</ref> besides many other organizations. He is currently one of the youngest Ethical Hacker in India<ref>{{Cite news|title=Warding off hackers: Bug bounty hunters working to keep firms cyber secure|work=[[Business Standard]]|url=https://www.business-standard.com/article/technology/warding-off-hackers-bug-bounty-hunters-working-to-keep-firms-cyber-secure-121060901597_1.html}}</ref>.

Sourajeet first came into the limelight after pointing out a highly critical vulnerability<ref name=":1">{{Cite news|last=|title=Over 8 million COVID-19 test results leaked online|work=[[Bleeping Computer]]|url=https://www.bleepingcomputer.com/news/security/over-8-million-covid-19-test-results-leaked-online/}}</ref><ref name=":2">{{Cite news|title=Indian state government website exposed COVID-19 lab test results|work=[[TechCrunch]]|url=https://techcrunch.com/2021/03/03/india-west-bengal-health-covid-security/}}</ref><ref>{{Cite news|title=WB govt website leaks lab results of millions of corona patients|work=[[IMDb]]|url=https://www.imdb.com/news/ni63216996}}</ref><ref name=":3">{{Cite news|title=Health Website Leaks 8 Million COVID-19 Test Results|url=https://threatpost.com/health-website-leaks-covid-19-test/164274/}}</ref><ref>{{Cite news|title=Exclusive {{!}} West Bengal Health Dept Left Over 1 Lakh Covid-19 Reports Exposed to Public Search|work=[[News18]]|url=https://www.news18.com/news/tech/west-bengal-health-dept-1-lakh-covid-19-reports-exposed-3448106.html}}</ref><ref name=":4">{{Cite news|title=কোভিড আক্রান্তদের তথ্য ফাঁস! স্বীকার করলেন স্বাস্থ্য আধিকারিক|work=[[TV9 Bangla]]|url=https://tv9bangla.com/west-bengal/jalpaiguri/siliguri-student-alleged-to-data-leak-of-west-bengal-corona-patients-332532.html}}</ref><ref>{{Cite news|title=করোনা পরীক্ষা করিয়েছিলেন? আপনার ব্যক্তিগত তথ্য যেতে পারে হ্যাকারদের হাতে|work=[[Ei Samay Sangbadpatra]]|url=https://eisamay.indiatimes.com/west-bengal-news/kolkata-news/a-class-xi-student-claimed-hackers-could-steal-information-from-the-state-health-departments-website/articleshow/81180161.cms}}</ref> in the official government website of [[Ministry of Health & Family Welfare (West Bengal)]] and since then he has been found actively contributing towards online security<ref name=":5">{{Cite news|title=Indian news portal's server breach exposes 40mn users; hackers selling 700K records for $350|work=[[International Business Times]]|url=https://www.ibtimes.co.in/indian-news-portals-server-breach-exposes-40mn-users-hackers-selling-700k-records-350-835112}}</ref><ref>{{Cite news|title=Vaccine Registration Targeted by Fake Apps: How to Stay Safe?|work=[[The Quint]]|url=https://www.thequint.com/tech-and-auto/vaccine-registration-targeted-by-fake-apps-how-to-stay-safe}}</ref><ref>{{Cite news|title=Pegasus Zero-Click Attack: How Does It Infect Phones? Which Device is Safe?|work=[[The Quint]]|url=https://www.thequint.com/tech-and-auto/zero-click-attacks-how-does-it-infect-phones-which-device-is-safer}}</ref><ref>{{Cite news|title=Privacy Analysis: How Much Of Your Data Do Popular Apps Share?|work=[[The Quint]]|url=https://www.thequint.com/tech-and-auto/privacy-analysis-how-much-of-your-data-do-popular-apps-share}}</ref><ref>{{Cite news|title=Domino's India Hack: 7 Years of Internal Docs, 10 Lakh Credit Cards on Sale for Rs 3.4 Crore|work=[[News18]]|url=https://www.news18.com/news/tech/dominos-india-hack-7-years-of-internal-docs-10-lakh-credit-cards-on-sale-for-rs-3-4-crore-3655799.html}}</ref> and fighting disinformation<ref>{{Cite news|title=LinkedIn's Data 'Scraped' Not 'Breached': Cyber Security Expert|work=[[The Quint]]|url=https://www.thequint.com/tech-and-auto/linkedin-data-breach-exposes-personal-data-of-92-percent-users}}</ref><ref>{{Cite news|title=How Cybercriminals Sell Fake Data and Fall for It Too|work=[[The Quint]]|url=https://www.thequint.com/tech-and-auto/cybercrime-fake-data-breach-on-the-rise}}</ref> in the the cyber space.

== Life ==
[[File:Sourajeet's_Interview_With_Siliguri_Times.jpg|left|thumb|266x266px|Majumder in an interview with [https://siliguritimes.com Siliguri Times]]]
Sourajeet was born and brought up in [[Siliguri]], a small city in [[West Bengal]]<ref name=":0" />. From a very early age, he was attracted towards technology and was often found meddling with computers and other electronic gadgets<ref name=":4" />. It was in his early school days that he first came across the word "Hacking" while searching for ways to crack the password of his brother's android device. By using a simple ‘Brute-force’ tool, which was available for free on the Internet, he managed to unlock the device. This incident helped him to dive deep into the field. Soon Majumder realized that he could use his skills for social good. At the age of 16, he bagged his first Bug bounty reward from Tumblr<ref>{{Cite news|title=সোশাল মিডিয়ার ভুল ধরে অ্যামেরিকার সংস্থার পুরস্কার পেল কিশোর|work=[[ETV]]|url=https://www.etvbharat.com/bengali/west-bengal/state/darjeeling/siliguri-student-awarded-to-find-out-tumblr-bug/wb20191002170917050}}</ref>.

== Recent Works ==
=== 1. Leakage Of Covid-19 Test Reports: ===
In February 2021, Majumder claimed that he had discovered a highly critical vulnerability in the official website of Ministry of Health & Family Welfare (West Bengal) which if exploited could have resulted in the leakage of over 8 Million Covid-19 Test Reports<ref name=":1" />. According to Majumder, after discovering the flaw he quickly communicated with the [[Indian Computer Emergency Response Team|CERT-IN]] who acknowledged the breach to Majumder<ref name=":2" />. Sourajeet also claimed that he had reached out to the system coordinator, who manages the website but didn't receive any response from him. However, according to a media report<ref name=":4" /> few days after the incident, a government-appointed health official acknowledged the flaw and said it would be fixed immediately<ref name=":3" />. Later reports published by [https://en.wikipedia.org/wiki/Bleeping_Computer Bleeping Computer]<ref name=":1" /> and [https://en.wikipedia.org/wiki/TechCrunch TechCrunch]<ref name=":2" /> shared that the vulnerability was fixed and could no longer be exploited.

=== 2. Students Data Leaked Online: ===
In March 2021, Sourajeet claimed that PII data of thousands of Indian students could be easily accessed by a simple Google search technique<ref name=":6">{{Cite news|title=Data of 100,000 Indian Students Leaked Online, Claims Researcher|work=[[The Quint]]|url=https://www.thequint.com/tech-and-auto/data-of-100000-indian-students-leaked-online-claims-researcher#read-more}}</ref>. According to him this data was getting leaked from multiple websites belonging to educational institutes and from publicly uploaded documents on Scribd<ref name=":6" />. Majumder claims to have discovered the data of many private schools, college and university students which included students' names, parents' names, phone numbers, email addresses and Aadhar card numbers<ref name=":6" />.

Later in July 2021 similar concerns regarding the leakage and sale of Indian student's data was brought up the [https://en.wikipedia.org/wiki/Internet_Freedom_Foundation Internet Freedom Foundation]<ref>{{Cite news|title=EXPLAINED: HOW THE STUDENT DATA BREACH LEAVES MINORS VULNERABLE TO SEVERAL THREATS|work=[[Firstpost]]|url=https://www.firstpost.com/tech/news-analysis/explained-how-the-student-data-breach-leaves-minors-vulnerable-to-several-threats-9839511.html}}</ref><ref>{{Cite web|title=Securing Examination Data: No Child’s Play|url=https://internetfreedom.in/securing-examination-data-no-childs-play-untitled/amp/|url-status=live|website=[[Internet Freedom Foundation]]}}</ref>

=== 3. Alleged Moneycontrol Data Breach: ===
In April 2021, Majumder tweeted that personal data of over 7 lakh registered users of Moneycontrol were available on a hacker's forum for just $350.<ref name=":5" /><ref name=":8">{{Cite news|title=Moneycontrol Resets Passwords En Masse After Alleged Data Breach Impacting 7 Lakh Users|work=[[Inc42]]|url=https://inc42.com/buzz/moneycontrol-resets-passwords-en-masse-after-alleged-data-breach/}}</ref><ref name=":7">{{Cite news|title=Moneycontrol.com data breach: Personal details of over seven lakh users up for sale on Hackers forums – Here is what we know so far|work=[[OpIndia]]|url=https://www.opindia.com/2021/04/personal-details-of-over-seven-lakh-moneycontrol-users-up-for-sale/}}</ref>. According to him the leaked data consisted of user emails and plain text passwords besides other details<ref name=":8" /><ref name=":7" />. Majumder further claimed that he was able to verify the login credentials which the hackers had shared as sample. This received a lot of attention and the Chief Technology Officer of Network18 replied to the tweet thread calling it an old data set with which Majumder highly disagreed<ref name=":7" />. A couple of days later it was found that a lot of users received a password change mail from Moneycontrol<ref name=":8" /> which Majumder in a press report called "a sneaky way" of asking users to change their passwords, without letting them know about the breach<ref name=":8" /><ref name=":5" />

Later in the month of May, [https://en.wikipedia.org/wiki/Troy_Hunt Troy Hunt] appreciated the [https://twitter.com/troyhunt/status/1396236899136655364?s=20 efforts] made by Majumder in bringing this breach out and added the leaked data set as a part of [https://en.wikipedia.org/wiki/Have_I_Been_Pwned%3F Have I Been Pwned]<ref>{{Cite web|title=have i been pwned?|url=https://haveibeenpwned.com/PwnedWebsites#Moneycontrol|url-status=live}}</ref>

== References ==
{{Reflist}}

== External links ==
{{commonscatinline}}

* [https://www.facebook.com/sourajeet.majumder.56 Official Facebook]
* [https://twitter.com/TechCrucio Official Twitter]

{{authority control}}

{{DEFAULTSORT:Sourajeet, Majumder}}
[[:Category:2003 births]]
[[:Category:Living people]]
[[:Category:Bengali people]]
[[:Category:Hackers]]
[[:Category:Security breaches]]
[[:Category:Cyber Security in India]]
[[:Category:Security Researcher]]
[[:Category:Technology]]

Sourajeet Majumder

2021-08-08T12:43:42Z

Bharatcontributor1234: /* Sourajeet Majumder */

{{AFC submission/draft}}

{{AfC submission|||ts=20210808181334|u=Bharatcontributor1234|ns=118}}
= Sourajeet Majumder =
{{Infobox person
| name = Sourajeet Majumder
| image = Sourajeet's Picture.jpg
| birth_date = {{birth-date and age|24 September 2003}}
| birth_place = [[Siliguri]], [[West Bengal, India]]
| occupation = Security Researcher, Cyber Expert, Ethical Hacker
}}

'''Sourajeet Majumder''' (born 24 September 2003) is an Indian Ethical Hacker, Security Researcher and Cyber Expert. Till date Majumder has helped securing multiple Indian Government sites.<ref>{{Cite journal|last=NCIIPC Acknowledging Majumder|date=July 2019|title=NCIIPC Newsletter July 2019|url=https://nciipc.gov.in/documents/NCIIPC_Newsletter_July19.pdf|journal=[[NCIIPC]]}}</ref><ref>{{Cite journal|last=NCIIPC Acknowledging Majumder|first=|date=October 2019|title=NCIIPC Newsletter October 2019|url=https://nciipc.gov.in/documents/NCIIPC_Newsletter_Oct19.pdf|journal=[[NCIIPC]]}}</ref>, MNCs<ref>{{Cite web|last=|title=Apple Web Server Notification|url=https://support.apple.com/en-in/HT201536|url-status=live|website=[[Apple Inc]]}}</ref><ref>{{Cite web|last=|title=Bughunter Hall Of Fame|url=https://bughunter.withgoogle.com/profile/ceaef5f4-43c8-44cd-b5c9-455c8cf69e91|url-status=live|website=[[Google]]}}</ref>, Universities<ref>{{Cite web|last=|title=Drexel's Bug Bounty Program|url=https://drexel.edu/it/security/services-processes/bug-bounty/|url-status=live|website=[[Drexel University]]}}</ref><ref name=":0">{{Cite news|last=|title=কেমব্রিজকে বাঁচাল শহরের সৌরজিৎ|work=[[Anandabazar Patrika]]|url=https://www.anandabazar.com/west-bengal/boy-of-siliguri-finds-out-security-threat-in-cambridge-university-website-1.1041195}}</ref> besides many other organizations. He is currently one of the youngest Ethical Hacker in India<ref>{{Cite news|title=Warding off hackers: Bug bounty hunters working to keep firms cyber secure|work=[[Business Standard]]|url=https://www.business-standard.com/article/technology/warding-off-hackers-bug-bounty-hunters-working-to-keep-firms-cyber-secure-121060901597_1.html}}</ref>.

Sourajeet first came into the limelight after pointing out a highly critical vulnerability<ref name=":1">{{Cite news|last=|title=Over 8 million COVID-19 test results leaked online|work=[[Bleeping Computer]]|url=https://www.bleepingcomputer.com/news/security/over-8-million-covid-19-test-results-leaked-online/}}</ref><ref name=":2">{{Cite news|title=Indian state government website exposed COVID-19 lab test results|work=[[TechCrunch]]|url=https://techcrunch.com/2021/03/03/india-west-bengal-health-covid-security/}}</ref><ref>{{Cite news|title=WB govt website leaks lab results of millions of corona patients|work=[[IMDb]]|url=https://www.imdb.com/news/ni63216996}}</ref><ref name=":3">{{Cite news|title=Health Website Leaks 8 Million COVID-19 Test Results|url=https://threatpost.com/health-website-leaks-covid-19-test/164274/}}</ref><ref>{{Cite news|title=Exclusive {{!}} West Bengal Health Dept Left Over 1 Lakh Covid-19 Reports Exposed to Public Search|work=[[News18]]|url=https://www.news18.com/news/tech/west-bengal-health-dept-1-lakh-covid-19-reports-exposed-3448106.html}}</ref><ref name=":4">{{Cite news|title=কোভিড আক্রান্তদের তথ্য ফাঁস! স্বীকার করলেন স্বাস্থ্য আধিকারিক|work=[[TV9 Bangla]]|url=https://tv9bangla.com/west-bengal/jalpaiguri/siliguri-student-alleged-to-data-leak-of-west-bengal-corona-patients-332532.html}}</ref><ref>{{Cite news|title=করোনা পরীক্ষা করিয়েছিলেন? আপনার ব্যক্তিগত তথ্য যেতে পারে হ্যাকারদের হাতে|work=[[Ei Samay Sangbadpatra]]|url=https://eisamay.indiatimes.com/west-bengal-news/kolkata-news/a-class-xi-student-claimed-hackers-could-steal-information-from-the-state-health-departments-website/articleshow/81180161.cms}}</ref> in the official government website of [[Ministry of Health & Family Welfare (West Bengal)]] and since then he has been found actively contributing towards online security<ref name=":5">{{Cite news|title=Indian news portal's server breach exposes 40mn users; hackers selling 700K records for $350|work=[[International Business Times]]|url=https://www.ibtimes.co.in/indian-news-portals-server-breach-exposes-40mn-users-hackers-selling-700k-records-350-835112}}</ref><ref>{{Cite news|title=Vaccine Registration Targeted by Fake Apps: How to Stay Safe?|work=[[The Quint]]|url=https://www.thequint.com/tech-and-auto/vaccine-registration-targeted-by-fake-apps-how-to-stay-safe}}</ref><ref>{{Cite news|title=Pegasus Zero-Click Attack: How Does It Infect Phones? Which Device is Safe?|work=[[The Quint]]|url=https://www.thequint.com/tech-and-auto/zero-click-attacks-how-does-it-infect-phones-which-device-is-safer}}</ref><ref>{{Cite news|title=Privacy Analysis: How Much Of Your Data Do Popular Apps Share?|work=[[The Quint]]|url=https://www.thequint.com/tech-and-auto/privacy-analysis-how-much-of-your-data-do-popular-apps-share}}</ref><ref>{{Cite news|title=Domino's India Hack: 7 Years of Internal Docs, 10 Lakh Credit Cards on Sale for Rs 3.4 Crore|work=[[News18]]|url=https://www.news18.com/news/tech/dominos-india-hack-7-years-of-internal-docs-10-lakh-credit-cards-on-sale-for-rs-3-4-crore-3655799.html}}</ref> and fighting disinformation<ref>{{Cite news|title=LinkedIn's Data 'Scraped' Not 'Breached': Cyber Security Expert|work=[[The Quint]]|url=https://www.thequint.com/tech-and-auto/linkedin-data-breach-exposes-personal-data-of-92-percent-users}}</ref><ref>{{Cite news|title=How Cybercriminals Sell Fake Data and Fall for It Too|work=[[The Quint]]|url=https://www.thequint.com/tech-and-auto/cybercrime-fake-data-breach-on-the-rise}}</ref> in the the cyber space.

== Life ==
[[File:Sourajeet's_Interview_With_Siliguri_Times.jpg|left|thumb|266x266px|Majumder in an interview with [https://siliguritimes.com Siliguri Times]]]
Sourajeet was born and brought up in [[Siliguri]], a small city in [[West Bengal]]<ref name=":0" />. From a very early age, he was attracted towards technology and was often found meddling with computers and other electronic gadgets<ref name=":4" />. It was in his early school days that he first came across the word "Hacking" while searching for ways to crack the password of his brother's android device. By using a simple ‘Brute-force’ tool, which was available for free on the Internet, he managed to unlock the device. This incident helped him to dive deep into the field. Soon Majumder realized that he could use his skills for social good. At the age of 16, he bagged his first Bug bounty reward from Tumblr<ref>{{Cite news|title=সোশাল মিডিয়ার ভুল ধরে অ্যামেরিকার সংস্থার পুরস্কার পেল কিশোর|work=[[ETV]]|url=https://www.etvbharat.com/bengali/west-bengal/state/darjeeling/siliguri-student-awarded-to-find-out-tumblr-bug/wb20191002170917050}}</ref>.

== Recent Works ==
[[File:Interview_With_TV9.jpg|thumb|Majumder's Interview With [[TV9 Bangla|TV9]]]]

=== 1. Leakage Of Covid-19 Test Reports: ===
In February 2021, Majumder claimed that he had discovered a highly critical vulnerability in the official website of Ministry of Health & Family Welfare (West Bengal) which if exploited could have resulted in the leakage of over 8 Million Covid-19 Test Reports<ref name=":1" />. According to Majumder, after discovering the flaw he quickly communicated with the [[Indian Computer Emergency Response Team|CERT-IN]] who acknowledged the breach to Majumder<ref name=":2" />. Sourajeet also claimed that he had reached out to the system coordinator, who manages the website but didn't receive any response from him. However, according to a media report<ref name=":4" /> few days after the incident, a government-appointed health official acknowledged the flaw and said it would be fixed immediately<ref name=":3" />. Later reports published by [https://en.wikipedia.org/wiki/Bleeping_Computer Bleeping Computer]<ref name=":1" /> and [https://en.wikipedia.org/wiki/TechCrunch TechCrunch]<ref name=":2" /> shared that the vulnerability was fixed and could no longer be exploited.

=== 2. Students Data Leaked Online: ===
In March 2021, Sourajeet claimed that PII data of thousands of Indian students could be easily accessed by a simple Google search technique<ref name=":6">{{Cite news|title=Data of 100,000 Indian Students Leaked Online, Claims Researcher|work=[[The Quint]]|url=https://www.thequint.com/tech-and-auto/data-of-100000-indian-students-leaked-online-claims-researcher#read-more}}</ref>. According to him this data was getting leaked from multiple websites belonging to educational institutes and from publicly uploaded documents on Scribd<ref name=":6" />. Majumder claims to have discovered the data of many private schools, college and university students which included students' names, parents' names, phone numbers, email addresses and Aadhar card numbers<ref name=":6" />.

Later in July 2021 similar concerns regarding the leakage and sale of Indian student's data was brought up the [https://en.wikipedia.org/wiki/Internet_Freedom_Foundation Internet Freedom Foundation]<ref>{{Cite news|title=EXPLAINED: HOW THE STUDENT DATA BREACH LEAVES MINORS VULNERABLE TO SEVERAL THREATS|work=[[Firstpost]]|url=https://www.firstpost.com/tech/news-analysis/explained-how-the-student-data-breach-leaves-minors-vulnerable-to-several-threats-9839511.html}}</ref><ref>{{Cite web|title=Securing Examination Data: No Child’s Play|url=https://internetfreedom.in/securing-examination-data-no-childs-play-untitled/amp/|url-status=live|website=[[Internet Freedom Foundation]]}}</ref>

=== 3. Alleged Moneycontrol Data Breach: ===
In April 2021, Majumder tweeted that personal data of over 7 lakh registered users of Moneycontrol were available on a hacker's forum for just $350.<ref name=":5" /><ref name=":8">{{Cite news|title=Moneycontrol Resets Passwords En Masse After Alleged Data Breach Impacting 7 Lakh Users|work=[[Inc42]]|url=https://inc42.com/buzz/moneycontrol-resets-passwords-en-masse-after-alleged-data-breach/}}</ref><ref name=":7">{{Cite news|title=Moneycontrol.com data breach: Personal details of over seven lakh users up for sale on Hackers forums – Here is what we know so far|work=[[OpIndia]]|url=https://www.opindia.com/2021/04/personal-details-of-over-seven-lakh-moneycontrol-users-up-for-sale/}}</ref>. According to him the leaked data consisted of user emails and plain text passwords besides other details<ref name=":8" /><ref name=":7" />. Majumder further claimed that he was able to verify the login credentials which the hackers had shared as sample. This received a lot of attention and the Chief Technology Officer of Network18 replied to the tweet thread calling it an old data set with which Majumder highly disagreed<ref name=":7" />. A couple of days later it was found that a lot of users received a password change mail from Moneycontrol<ref name=":8" /> which Majumder in a press report called "a sneaky way" of asking users to change their passwords, without letting them know about the breach<ref name=":8" /><ref name=":5" />

Later in the month of May, [https://en.wikipedia.org/wiki/Troy_Hunt Troy Hunt] appreciated the [https://twitter.com/troyhunt/status/1396236899136655364?s=20 efforts] made by Majumder in bringing this breach out and added the leaked data set as a part of [https://en.wikipedia.org/wiki/Have_I_Been_Pwned%3F Have I Been Pwned]<ref>{{Cite web|title=have i been pwned?|url=https://haveibeenpwned.com/PwnedWebsites#Moneycontrol|url-status=live}}</ref>

== References ==
{{Reflist}}

== External links ==
{{commonscatinline}}

* [https://www.facebook.com/sourajeet.majumder.56 Official Facebook]
* [https://twitter.com/TechCrucio Official Twitter]

{{authority control}}

{{DEFAULTSORT:Sourajeet, Majumder}}
[[:Category:2003 births]]
[[:Category:Living people]]
[[:Category:Bengali people]]
[[:Category:Hackers]]
[[:Category:Security breaches]]
[[:Category:Cyber Security in India]]
[[:Category:Security Researcher]]
[[:Category:Technology]]

Sourajeet Majumder

2021-08-08T12:40:10Z

Bharatcontributor1234: /* 3. Alleged Moneycontrol Data Breach: */

{{AFC submission/draft}}

= Sourajeet Majumder =
{{Infobox person
| name = Sourajeet Majumder
| image = Sourajeet's Picture.jpg
| birth_date = {{birth-date and age|24 September 2003}}
| birth_place = [[Siliguri]], [[West Bengal, India]]
| occupation = Security Researcher, Cyber Expert, Ethical Hacker
}}

'''Sourajeet Majumder''' (born 24 September 2003) is an Indian Ethical Hacker, Security Researcher and Cyber Expert. Till date Majumder has helped securing multiple Indian Government sites.<ref>{{Cite journal|last=NCIIPC Acknowledging Majumder|date=July 2019|title=NCIIPC Newsletter July 2019|url=https://nciipc.gov.in/documents/NCIIPC_Newsletter_July19.pdf|journal=[[NCIIPC]]}}</ref><ref>{{Cite journal|last=NCIIPC Acknowledging Majumder|first=|date=October 2019|title=NCIIPC Newsletter October 2019|url=https://nciipc.gov.in/documents/NCIIPC_Newsletter_Oct19.pdf|journal=[[NCIIPC]]}}</ref>, MNCs<ref>{{Cite web|last=|title=Apple Web Server Notification|url=https://support.apple.com/en-in/HT201536|url-status=live|website=[[Apple Inc]]}}</ref><ref>{{Cite web|last=|title=Bughunter Hall Of Fame|url=https://bughunter.withgoogle.com/profile/ceaef5f4-43c8-44cd-b5c9-455c8cf69e91|url-status=live|website=[[Google]]}}</ref>, Universities<ref>{{Cite web|last=|title=Drexel's Bug Bounty Program|url=https://drexel.edu/it/security/services-processes/bug-bounty/|url-status=live|website=[[Drexel University]]}}</ref><ref name=":0">{{Cite news|last=|title=কেমব্রিজকে বাঁচাল শহরের সৌরজিৎ|work=[[Anandabazar Patrika]]|url=https://www.anandabazar.com/west-bengal/boy-of-siliguri-finds-out-security-threat-in-cambridge-university-website-1.1041195}}</ref> besides many other organizations. He is currently one of the youngest Ethical Hacker in India<ref>{{Cite news|title=Warding off hackers: Bug bounty hunters working to keep firms cyber secure|work=[[Business Standard]]|url=https://www.business-standard.com/article/technology/warding-off-hackers-bug-bounty-hunters-working-to-keep-firms-cyber-secure-121060901597_1.html}}</ref>.

Sourajeet first came into the limelight after pointing out a highly critical vulnerability<ref name=":1">{{Cite news|last=|title=Over 8 million COVID-19 test results leaked online|work=[[Bleeping Computer]]|url=https://www.bleepingcomputer.com/news/security/over-8-million-covid-19-test-results-leaked-online/}}</ref><ref name=":2">{{Cite news|title=Indian state government website exposed COVID-19 lab test results|work=[[TechCrunch]]|url=https://techcrunch.com/2021/03/03/india-west-bengal-health-covid-security/}}</ref><ref>{{Cite news|title=WB govt website leaks lab results of millions of corona patients|work=[[IMDb]]|url=https://www.imdb.com/news/ni63216996}}</ref><ref name=":3">{{Cite news|title=Health Website Leaks 8 Million COVID-19 Test Results|url=https://threatpost.com/health-website-leaks-covid-19-test/164274/}}</ref><ref>{{Cite news|title=Exclusive {{!}} West Bengal Health Dept Left Over 1 Lakh Covid-19 Reports Exposed to Public Search|work=[[News18]]|url=https://www.news18.com/news/tech/west-bengal-health-dept-1-lakh-covid-19-reports-exposed-3448106.html}}</ref><ref name=":4">{{Cite news|title=কোভিড আক্রান্তদের তথ্য ফাঁস! স্বীকার করলেন স্বাস্থ্য আধিকারিক|work=[[TV9 Bangla]]|url=https://tv9bangla.com/west-bengal/jalpaiguri/siliguri-student-alleged-to-data-leak-of-west-bengal-corona-patients-332532.html}}</ref><ref>{{Cite news|title=করোনা পরীক্ষা করিয়েছিলেন? আপনার ব্যক্তিগত তথ্য যেতে পারে হ্যাকারদের হাতে|work=[[Ei Samay Sangbadpatra]]|url=https://eisamay.indiatimes.com/west-bengal-news/kolkata-news/a-class-xi-student-claimed-hackers-could-steal-information-from-the-state-health-departments-website/articleshow/81180161.cms}}</ref> in the official government website of [[Ministry of Health & Family Welfare (West Bengal)]] and since then he has been found actively contributing towards online security<ref name=":5">{{Cite news|title=Indian news portal's server breach exposes 40mn users; hackers selling 700K records for $350|work=[[International Business Times]]|url=https://www.ibtimes.co.in/indian-news-portals-server-breach-exposes-40mn-users-hackers-selling-700k-records-350-835112}}</ref><ref>{{Cite news|title=Vaccine Registration Targeted by Fake Apps: How to Stay Safe?|work=[[The Quint]]|url=https://www.thequint.com/tech-and-auto/vaccine-registration-targeted-by-fake-apps-how-to-stay-safe}}</ref><ref>{{Cite news|title=Pegasus Zero-Click Attack: How Does It Infect Phones? Which Device is Safe?|work=[[The Quint]]|url=https://www.thequint.com/tech-and-auto/zero-click-attacks-how-does-it-infect-phones-which-device-is-safer}}</ref><ref>{{Cite news|title=Privacy Analysis: How Much Of Your Data Do Popular Apps Share?|work=[[The Quint]]|url=https://www.thequint.com/tech-and-auto/privacy-analysis-how-much-of-your-data-do-popular-apps-share}}</ref><ref>{{Cite news|title=Domino's India Hack: 7 Years of Internal Docs, 10 Lakh Credit Cards on Sale for Rs 3.4 Crore|work=[[News18]]|url=https://www.news18.com/news/tech/dominos-india-hack-7-years-of-internal-docs-10-lakh-credit-cards-on-sale-for-rs-3-4-crore-3655799.html}}</ref> and fighting disinformation<ref>{{Cite news|title=LinkedIn's Data 'Scraped' Not 'Breached': Cyber Security Expert|work=[[The Quint]]|url=https://www.thequint.com/tech-and-auto/linkedin-data-breach-exposes-personal-data-of-92-percent-users}}</ref><ref>{{Cite news|title=How Cybercriminals Sell Fake Data and Fall for It Too|work=[[The Quint]]|url=https://www.thequint.com/tech-and-auto/cybercrime-fake-data-breach-on-the-rise}}</ref> in the the cyber space.

== Life ==
[[File:Sourajeet's_Interview_With_Siliguri_Times.jpg|left|thumb|266x266px|Majumder in an interview with [https://siliguritimes.com Siliguri Times]]]
Sourajeet was born and brought up in [[Siliguri]], a small city in [[West Bengal]]<ref name=":0" />. From a very early age, he was attracted towards technology and was often found meddling with computers and other electronic gadgets<ref name=":4" />. It was in his early school days that he first came across the word "Hacking" while searching for ways to crack the password of his brother's android device. By using a simple ‘Brute-force’ tool, which was available for free on the Internet, he managed to unlock the device. This incident helped him to dive deep into the field. Soon Majumder realized that he could use his skills for social good. At the age of 16, he bagged his first Bug bounty reward from Tumblr<ref>{{Cite news|title=সোশাল মিডিয়ার ভুল ধরে অ্যামেরিকার সংস্থার পুরস্কার পেল কিশোর|work=[[ETV]]|url=https://www.etvbharat.com/bengali/west-bengal/state/darjeeling/siliguri-student-awarded-to-find-out-tumblr-bug/wb20191002170917050}}</ref>.

== Recent Works ==
[[File:Interview_With_TV9.jpg|thumb|Majumder's Interview With [[TV9 Bangla|TV9]]]]

=== 1. Leakage Of Covid-19 Test Reports: ===
In February 2021, Majumder claimed that he had discovered a highly critical vulnerability in the official website of Ministry of Health & Family Welfare (West Bengal) which if exploited could have resulted in the leakage of over 8 Million Covid-19 Test Reports<ref name=":1" />. According to Majumder, after discovering the flaw he quickly communicated with the [[Indian Computer Emergency Response Team|CERT-IN]] who acknowledged the breach to Majumder<ref name=":2" />. Sourajeet also claimed that he had reached out to the system coordinator, who manages the website but didn't receive any response from him. However, according to a media report<ref name=":4" /> few days after the incident, a government-appointed health official acknowledged the flaw and said it would be fixed immediately<ref name=":3" />. Later reports published by [https://en.wikipedia.org/wiki/Bleeping_Computer Bleeping Computer]<ref name=":1" /> and [https://en.wikipedia.org/wiki/TechCrunch TechCrunch]<ref name=":2" /> shared that the vulnerability was fixed and could no longer be exploited.

=== 2. Students Data Leaked Online: ===
In March 2021, Sourajeet claimed that PII data of thousands of Indian students could be easily accessed by a simple Google search technique<ref name=":6">{{Cite news|title=Data of 100,000 Indian Students Leaked Online, Claims Researcher|work=[[The Quint]]|url=https://www.thequint.com/tech-and-auto/data-of-100000-indian-students-leaked-online-claims-researcher#read-more}}</ref>. According to him this data was getting leaked from multiple websites belonging to educational institutes and from publicly uploaded documents on Scribd<ref name=":6" />. Majumder claims to have discovered the data of many private schools, college and university students which included students' names, parents' names, phone numbers, email addresses and Aadhar card numbers<ref name=":6" />.

Later in July 2021 similar concerns regarding the leakage and sale of Indian student's data was brought up the [https://en.wikipedia.org/wiki/Internet_Freedom_Foundation Internet Freedom Foundation]<ref>{{Cite news|title=EXPLAINED: HOW THE STUDENT DATA BREACH LEAVES MINORS VULNERABLE TO SEVERAL THREATS|work=[[Firstpost]]|url=https://www.firstpost.com/tech/news-analysis/explained-how-the-student-data-breach-leaves-minors-vulnerable-to-several-threats-9839511.html}}</ref><ref>{{Cite web|title=Securing Examination Data: No Child’s Play|url=https://internetfreedom.in/securing-examination-data-no-childs-play-untitled/amp/|url-status=live|website=[[Internet Freedom Foundation]]}}</ref>

=== 3. Alleged Moneycontrol Data Breach: ===
In April 2021, Majumder tweeted that personal data of over 7 lakh registered users of Moneycontrol were available on a hacker's forum for just $350.<ref name=":5" /><ref name=":8">{{Cite news|title=Moneycontrol Resets Passwords En Masse After Alleged Data Breach Impacting 7 Lakh Users|work=[[Inc42]]|url=https://inc42.com/buzz/moneycontrol-resets-passwords-en-masse-after-alleged-data-breach/}}</ref><ref name=":7">{{Cite news|title=Moneycontrol.com data breach: Personal details of over seven lakh users up for sale on Hackers forums – Here is what we know so far|work=[[OpIndia]]|url=https://www.opindia.com/2021/04/personal-details-of-over-seven-lakh-moneycontrol-users-up-for-sale/}}</ref>. According to him the leaked data consisted of user emails and plain text passwords besides other details<ref name=":8" /><ref name=":7" />. Majumder further claimed that he was able to verify the login credentials which the hackers had shared as sample. This received a lot of attention and the Chief Technology Officer of Network18 replied to the tweet thread calling it an old data set with which Majumder highly disagreed<ref name=":7" />. A couple of days later it was found that a lot of users received a password change mail from Moneycontrol<ref name=":8" /> which Majumder in a press report called "a sneaky way" of asking users to change their passwords, without letting them know about the breach<ref name=":8" /><ref name=":5" />

Later in the month of May, [https://en.wikipedia.org/wiki/Troy_Hunt Troy Hunt] appreciated the [https://twitter.com/troyhunt/status/1396236899136655364?s=20 efforts] made by Majumder in bringing this breach out and added the leaked data set as a part of [https://en.wikipedia.org/wiki/Have_I_Been_Pwned%3F Have I Been Pwned]<ref>{{Cite web|title=have i been pwned?|url=https://haveibeenpwned.com/PwnedWebsites#Moneycontrol|url-status=live}}</ref>

== References ==
{{Reflist}}

== External links ==
{{commonscatinline}}

* [https://www.facebook.com/sourajeet.majumder.56 Official Facebook]
* [https://twitter.com/TechCrucio Official Twitter]

{{authority control}}

{{DEFAULTSORT:Sourajeet, Majumder}}
[[:Category:2003 births]]
[[:Category:Living people]]
[[:Category:Bengali people]]
[[:Category:Hackers]]
[[:Category:Security breaches]]
[[:Category:Cyber Security in India]]
[[:Category:Security Researcher]]
[[:Category:Technology]]

Sourajeet Majumder

2021-08-08T12:37:49Z

Bharatcontributor1234: /* 2. Students Data Leaked Online: */

{{AFC submission/draft}}

= Sourajeet Majumder =
{{Infobox person
| name = Sourajeet Majumder
| image = Sourajeet's Picture.jpg
| birth_date = {{birth-date and age|24 September 2003}}
| birth_place = [[Siliguri]], [[West Bengal, India]]
| occupation = Security Researcher, Cyber Expert, Ethical Hacker
}}

'''Sourajeet Majumder''' (born 24 September 2003) is an Indian Ethical Hacker, Security Researcher and Cyber Expert. Till date Majumder has helped securing multiple Indian Government sites.<ref>{{Cite journal|last=NCIIPC Acknowledging Majumder|date=July 2019|title=NCIIPC Newsletter July 2019|url=https://nciipc.gov.in/documents/NCIIPC_Newsletter_July19.pdf|journal=[[NCIIPC]]}}</ref><ref>{{Cite journal|last=NCIIPC Acknowledging Majumder|first=|date=October 2019|title=NCIIPC Newsletter October 2019|url=https://nciipc.gov.in/documents/NCIIPC_Newsletter_Oct19.pdf|journal=[[NCIIPC]]}}</ref>, MNCs<ref>{{Cite web|last=|title=Apple Web Server Notification|url=https://support.apple.com/en-in/HT201536|url-status=live|website=[[Apple Inc]]}}</ref><ref>{{Cite web|last=|title=Bughunter Hall Of Fame|url=https://bughunter.withgoogle.com/profile/ceaef5f4-43c8-44cd-b5c9-455c8cf69e91|url-status=live|website=[[Google]]}}</ref>, Universities<ref>{{Cite web|last=|title=Drexel's Bug Bounty Program|url=https://drexel.edu/it/security/services-processes/bug-bounty/|url-status=live|website=[[Drexel University]]}}</ref><ref name=":0">{{Cite news|last=|title=কেমব্রিজকে বাঁচাল শহরের সৌরজিৎ|work=[[Anandabazar Patrika]]|url=https://www.anandabazar.com/west-bengal/boy-of-siliguri-finds-out-security-threat-in-cambridge-university-website-1.1041195}}</ref> besides many other organizations. He is currently one of the youngest Ethical Hacker in India<ref>{{Cite news|title=Warding off hackers: Bug bounty hunters working to keep firms cyber secure|work=[[Business Standard]]|url=https://www.business-standard.com/article/technology/warding-off-hackers-bug-bounty-hunters-working-to-keep-firms-cyber-secure-121060901597_1.html}}</ref>.

Sourajeet first came into the limelight after pointing out a highly critical vulnerability<ref name=":1">{{Cite news|last=|title=Over 8 million COVID-19 test results leaked online|work=[[Bleeping Computer]]|url=https://www.bleepingcomputer.com/news/security/over-8-million-covid-19-test-results-leaked-online/}}</ref><ref name=":2">{{Cite news|title=Indian state government website exposed COVID-19 lab test results|work=[[TechCrunch]]|url=https://techcrunch.com/2021/03/03/india-west-bengal-health-covid-security/}}</ref><ref>{{Cite news|title=WB govt website leaks lab results of millions of corona patients|work=[[IMDb]]|url=https://www.imdb.com/news/ni63216996}}</ref><ref name=":3">{{Cite news|title=Health Website Leaks 8 Million COVID-19 Test Results|url=https://threatpost.com/health-website-leaks-covid-19-test/164274/}}</ref><ref>{{Cite news|title=Exclusive {{!}} West Bengal Health Dept Left Over 1 Lakh Covid-19 Reports Exposed to Public Search|work=[[News18]]|url=https://www.news18.com/news/tech/west-bengal-health-dept-1-lakh-covid-19-reports-exposed-3448106.html}}</ref><ref name=":4">{{Cite news|title=কোভিড আক্রান্তদের তথ্য ফাঁস! স্বীকার করলেন স্বাস্থ্য আধিকারিক|work=[[TV9 Bangla]]|url=https://tv9bangla.com/west-bengal/jalpaiguri/siliguri-student-alleged-to-data-leak-of-west-bengal-corona-patients-332532.html}}</ref><ref>{{Cite news|title=করোনা পরীক্ষা করিয়েছিলেন? আপনার ব্যক্তিগত তথ্য যেতে পারে হ্যাকারদের হাতে|work=[[Ei Samay Sangbadpatra]]|url=https://eisamay.indiatimes.com/west-bengal-news/kolkata-news/a-class-xi-student-claimed-hackers-could-steal-information-from-the-state-health-departments-website/articleshow/81180161.cms}}</ref> in the official government website of [[Ministry of Health & Family Welfare (West Bengal)]] and since then he has been found actively contributing towards online security<ref name=":5">{{Cite news|title=Indian news portal's server breach exposes 40mn users; hackers selling 700K records for $350|work=[[International Business Times]]|url=https://www.ibtimes.co.in/indian-news-portals-server-breach-exposes-40mn-users-hackers-selling-700k-records-350-835112}}</ref><ref>{{Cite news|title=Vaccine Registration Targeted by Fake Apps: How to Stay Safe?|work=[[The Quint]]|url=https://www.thequint.com/tech-and-auto/vaccine-registration-targeted-by-fake-apps-how-to-stay-safe}}</ref><ref>{{Cite news|title=Pegasus Zero-Click Attack: How Does It Infect Phones? Which Device is Safe?|work=[[The Quint]]|url=https://www.thequint.com/tech-and-auto/zero-click-attacks-how-does-it-infect-phones-which-device-is-safer}}</ref><ref>{{Cite news|title=Privacy Analysis: How Much Of Your Data Do Popular Apps Share?|work=[[The Quint]]|url=https://www.thequint.com/tech-and-auto/privacy-analysis-how-much-of-your-data-do-popular-apps-share}}</ref><ref>{{Cite news|title=Domino's India Hack: 7 Years of Internal Docs, 10 Lakh Credit Cards on Sale for Rs 3.4 Crore|work=[[News18]]|url=https://www.news18.com/news/tech/dominos-india-hack-7-years-of-internal-docs-10-lakh-credit-cards-on-sale-for-rs-3-4-crore-3655799.html}}</ref> and fighting disinformation<ref>{{Cite news|title=LinkedIn's Data 'Scraped' Not 'Breached': Cyber Security Expert|work=[[The Quint]]|url=https://www.thequint.com/tech-and-auto/linkedin-data-breach-exposes-personal-data-of-92-percent-users}}</ref><ref>{{Cite news|title=How Cybercriminals Sell Fake Data and Fall for It Too|work=[[The Quint]]|url=https://www.thequint.com/tech-and-auto/cybercrime-fake-data-breach-on-the-rise}}</ref> in the the cyber space.

== Life ==
[[File:Sourajeet's_Interview_With_Siliguri_Times.jpg|left|thumb|266x266px|Majumder in an interview with [https://siliguritimes.com Siliguri Times]]]
Sourajeet was born and brought up in [[Siliguri]], a small city in [[West Bengal]]<ref name=":0" />. From a very early age, he was attracted towards technology and was often found meddling with computers and other electronic gadgets<ref name=":4" />. It was in his early school days that he first came across the word "Hacking" while searching for ways to crack the password of his brother's android device. By using a simple ‘Brute-force’ tool, which was available for free on the Internet, he managed to unlock the device. This incident helped him to dive deep into the field. Soon Majumder realized that he could use his skills for social good. At the age of 16, he bagged his first Bug bounty reward from Tumblr<ref>{{Cite news|title=সোশাল মিডিয়ার ভুল ধরে অ্যামেরিকার সংস্থার পুরস্কার পেল কিশোর|work=[[ETV]]|url=https://www.etvbharat.com/bengali/west-bengal/state/darjeeling/siliguri-student-awarded-to-find-out-tumblr-bug/wb20191002170917050}}</ref>.

== Recent Works ==
[[File:Interview_With_TV9.jpg|thumb|Majumder's Interview With [[TV9 Bangla|TV9]]]]

=== 1. Leakage Of Covid-19 Test Reports: ===
In February 2021, Majumder claimed that he had discovered a highly critical vulnerability in the official website of Ministry of Health & Family Welfare (West Bengal) which if exploited could have resulted in the leakage of over 8 Million Covid-19 Test Reports<ref name=":1" />. According to Majumder, after discovering the flaw he quickly communicated with the [[Indian Computer Emergency Response Team|CERT-IN]] who acknowledged the breach to Majumder<ref name=":2" />. Sourajeet also claimed that he had reached out to the system coordinator, who manages the website but didn't receive any response from him. However, according to a media report<ref name=":4" /> few days after the incident, a government-appointed health official acknowledged the flaw and said it would be fixed immediately<ref name=":3" />. Later reports published by [https://en.wikipedia.org/wiki/Bleeping_Computer Bleeping Computer]<ref name=":1" /> and [https://en.wikipedia.org/wiki/TechCrunch TechCrunch]<ref name=":2" /> shared that the vulnerability was fixed and could no longer be exploited.

=== 2. Students Data Leaked Online: ===
In March 2021, Sourajeet claimed that PII data of thousands of Indian students could be easily accessed by a simple Google search technique<ref name=":6">{{Cite news|title=Data of 100,000 Indian Students Leaked Online, Claims Researcher|work=[[The Quint]]|url=https://www.thequint.com/tech-and-auto/data-of-100000-indian-students-leaked-online-claims-researcher#read-more}}</ref>. According to him this data was getting leaked from multiple websites belonging to educational institutes and from publicly uploaded documents on Scribd<ref name=":6" />. Majumder claims to have discovered the data of many private schools, college and university students which included students' names, parents' names, phone numbers, email addresses and Aadhar card numbers<ref name=":6" />.

Later in July 2021 similar concerns regarding the leakage and sale of Indian student's data was brought up the [https://en.wikipedia.org/wiki/Internet_Freedom_Foundation Internet Freedom Foundation]<ref>{{Cite news|title=EXPLAINED: HOW THE STUDENT DATA BREACH LEAVES MINORS VULNERABLE TO SEVERAL THREATS|work=[[Firstpost]]|url=https://www.firstpost.com/tech/news-analysis/explained-how-the-student-data-breach-leaves-minors-vulnerable-to-several-threats-9839511.html}}</ref><ref>{{Cite web|title=Securing Examination Data: No Child’s Play|url=https://internetfreedom.in/securing-examination-data-no-childs-play-untitled/amp/|url-status=live|website=[[Internet Freedom Foundation]]}}</ref>

=== 3. Alleged Moneycontrol Data Breach: ===
In April 2021, Majumder tweeted that personal data of over 7 lakh registered users of Moneycontrol were available on a hacker's forum for just $350.<ref name=":5" /><ref name=":8">{{Cite news|title=Moneycontrol Resets Passwords En Masse After Alleged Data Breach Impacting 7 Lakh Users|work=[[Inc42]]|url=https://inc42.com/buzz/moneycontrol-resets-passwords-en-masse-after-alleged-data-breach/}}</ref><ref name=":7">{{Cite news|title=Moneycontrol.com data breach: Personal details of over seven lakh users up for sale on Hackers forums – Here is what we know so far|work=[[OpIndia]]|url=https://www.opindia.com/2021/04/personal-details-of-over-seven-lakh-moneycontrol-users-up-for-sale/}}</ref>. According to him the leaked data consisted of user emails and plain text passwords besides other details<ref name=":8" /><ref name=":7" />. Majumder further claimed that he was able to verify the login credentials which the hackers had shared as sample. This received a lot of attention and the Chief Technology Officer of Network18 replied to the tweet thread calling it an old data set with which Majumder highly disagreed<ref name=":7" />. A couple of days later it was found that a lot of users received a password change mail from Moneycontrol<ref name=":8" /> which Majumder in a press report called "a sneaky way" of asking users to change their passwords, without letting them know about the breach<ref name=":8" /><ref name=":5" />

Later in the month of May, [https://en.wikipedia.org/wiki/Troy_Hunt Troy Hunt] appreciated the efforts made by Majumder in bringing this breach out and added the leaked data set as a part of [https://en.wikipedia.org/wiki/Have_I_Been_Pwned%3F Have I Been Pwned]<ref>{{Cite web|title=have i been pwned?|url=https://haveibeenpwned.com/PwnedWebsites#Moneycontrol|url-status=live}}</ref>

== References ==
{{Reflist}}

== External links ==
{{commonscatinline}}

* [https://www.facebook.com/sourajeet.majumder.56 Official Facebook]
* [https://twitter.com/TechCrucio Official Twitter]

{{authority control}}

{{DEFAULTSORT:Sourajeet, Majumder}}
[[:Category:2003 births]]
[[:Category:Living people]]
[[:Category:Bengali people]]
[[:Category:Hackers]]
[[:Category:Security breaches]]
[[:Category:Cyber Security in India]]
[[:Category:Security Researcher]]
[[:Category:Technology]]

Sourajeet Majumder

2021-08-08T12:33:35Z

Bharatcontributor1234: This is a page created on Sourajeet Majumder who is a popular security researcher and a cyber expert. This page contains information abut him and his recent works which has been featured by multiple media houses.

{{AFC submission/draft}}

= Sourajeet Majumder =
{{Infobox person
| name = Sourajeet Majumder
| image = Sourajeet's Picture.jpg
| birth_date = {{birth-date and age|24 September 2003}}
| birth_place = [[Siliguri]], [[West Bengal, India]]
| occupation = Security Researcher, Cyber Expert, Ethical Hacker
}}

'''Sourajeet Majumder''' (born 24 September 2003) is an Indian Ethical Hacker, Security Researcher and Cyber Expert. Till date Majumder has helped securing multiple Indian Government sites.<ref>{{Cite journal|last=NCIIPC Acknowledging Majumder|date=July 2019|title=NCIIPC Newsletter July 2019|url=https://nciipc.gov.in/documents/NCIIPC_Newsletter_July19.pdf|journal=[[NCIIPC]]}}</ref><ref>{{Cite journal|last=NCIIPC Acknowledging Majumder|first=|date=October 2019|title=NCIIPC Newsletter October 2019|url=https://nciipc.gov.in/documents/NCIIPC_Newsletter_Oct19.pdf|journal=[[NCIIPC]]}}</ref>, MNCs<ref>{{Cite web|last=|title=Apple Web Server Notification|url=https://support.apple.com/en-in/HT201536|url-status=live|website=[[Apple Inc]]}}</ref><ref>{{Cite web|last=|title=Bughunter Hall Of Fame|url=https://bughunter.withgoogle.com/profile/ceaef5f4-43c8-44cd-b5c9-455c8cf69e91|url-status=live|website=[[Google]]}}</ref>, Universities<ref>{{Cite web|last=|title=Drexel's Bug Bounty Program|url=https://drexel.edu/it/security/services-processes/bug-bounty/|url-status=live|website=[[Drexel University]]}}</ref><ref name=":0">{{Cite news|last=|title=কেমব্রিজকে বাঁচাল শহরের সৌরজিৎ|work=[[Anandabazar Patrika]]|url=https://www.anandabazar.com/west-bengal/boy-of-siliguri-finds-out-security-threat-in-cambridge-university-website-1.1041195}}</ref> besides many other organizations. He is currently one of the youngest Ethical Hacker in India<ref>{{Cite news|title=Warding off hackers: Bug bounty hunters working to keep firms cyber secure|work=[[Business Standard]]|url=https://www.business-standard.com/article/technology/warding-off-hackers-bug-bounty-hunters-working-to-keep-firms-cyber-secure-121060901597_1.html}}</ref>.

Sourajeet first came into the limelight after pointing out a highly critical vulnerability<ref name=":1">{{Cite news|last=|title=Over 8 million COVID-19 test results leaked online|work=[[Bleeping Computer]]|url=https://www.bleepingcomputer.com/news/security/over-8-million-covid-19-test-results-leaked-online/}}</ref><ref name=":2">{{Cite news|title=Indian state government website exposed COVID-19 lab test results|work=[[TechCrunch]]|url=https://techcrunch.com/2021/03/03/india-west-bengal-health-covid-security/}}</ref><ref>{{Cite news|title=WB govt website leaks lab results of millions of corona patients|work=[[IMDb]]|url=https://www.imdb.com/news/ni63216996}}</ref><ref name=":3">{{Cite news|title=Health Website Leaks 8 Million COVID-19 Test Results|url=https://threatpost.com/health-website-leaks-covid-19-test/164274/}}</ref><ref>{{Cite news|title=Exclusive {{!}} West Bengal Health Dept Left Over 1 Lakh Covid-19 Reports Exposed to Public Search|work=[[News18]]|url=https://www.news18.com/news/tech/west-bengal-health-dept-1-lakh-covid-19-reports-exposed-3448106.html}}</ref><ref name=":4">{{Cite news|title=কোভিড আক্রান্তদের তথ্য ফাঁস! স্বীকার করলেন স্বাস্থ্য আধিকারিক|work=[[TV9 Bangla]]|url=https://tv9bangla.com/west-bengal/jalpaiguri/siliguri-student-alleged-to-data-leak-of-west-bengal-corona-patients-332532.html}}</ref><ref>{{Cite news|title=করোনা পরীক্ষা করিয়েছিলেন? আপনার ব্যক্তিগত তথ্য যেতে পারে হ্যাকারদের হাতে|work=[[Ei Samay Sangbadpatra]]|url=https://eisamay.indiatimes.com/west-bengal-news/kolkata-news/a-class-xi-student-claimed-hackers-could-steal-information-from-the-state-health-departments-website/articleshow/81180161.cms}}</ref> in the official government website of [[Ministry of Health & Family Welfare (West Bengal)]] and since then he has been found actively contributing towards online security<ref name=":5">{{Cite news|title=Indian news portal's server breach exposes 40mn users; hackers selling 700K records for $350|work=[[International Business Times]]|url=https://www.ibtimes.co.in/indian-news-portals-server-breach-exposes-40mn-users-hackers-selling-700k-records-350-835112}}</ref><ref>{{Cite news|title=Vaccine Registration Targeted by Fake Apps: How to Stay Safe?|work=[[The Quint]]|url=https://www.thequint.com/tech-and-auto/vaccine-registration-targeted-by-fake-apps-how-to-stay-safe}}</ref><ref>{{Cite news|title=Pegasus Zero-Click Attack: How Does It Infect Phones? Which Device is Safe?|work=[[The Quint]]|url=https://www.thequint.com/tech-and-auto/zero-click-attacks-how-does-it-infect-phones-which-device-is-safer}}</ref><ref>{{Cite news|title=Privacy Analysis: How Much Of Your Data Do Popular Apps Share?|work=[[The Quint]]|url=https://www.thequint.com/tech-and-auto/privacy-analysis-how-much-of-your-data-do-popular-apps-share}}</ref><ref>{{Cite news|title=Domino's India Hack: 7 Years of Internal Docs, 10 Lakh Credit Cards on Sale for Rs 3.4 Crore|work=[[News18]]|url=https://www.news18.com/news/tech/dominos-india-hack-7-years-of-internal-docs-10-lakh-credit-cards-on-sale-for-rs-3-4-crore-3655799.html}}</ref> and fighting disinformation<ref>{{Cite news|title=LinkedIn's Data 'Scraped' Not 'Breached': Cyber Security Expert|work=[[The Quint]]|url=https://www.thequint.com/tech-and-auto/linkedin-data-breach-exposes-personal-data-of-92-percent-users}}</ref><ref>{{Cite news|title=How Cybercriminals Sell Fake Data and Fall for It Too|work=[[The Quint]]|url=https://www.thequint.com/tech-and-auto/cybercrime-fake-data-breach-on-the-rise}}</ref> in the the cyber space.

== Life ==
[[File:Sourajeet's_Interview_With_Siliguri_Times.jpg|left|thumb|266x266px|Majumder in an interview with [https://siliguritimes.com Siliguri Times]]]
Sourajeet was born and brought up in [[Siliguri]], a small city in [[West Bengal]]<ref name=":0" />. From a very early age, he was attracted towards technology and was often found meddling with computers and other electronic gadgets<ref name=":4" />. It was in his early school days that he first came across the word "Hacking" while searching for ways to crack the password of his brother's android device. By using a simple ‘Brute-force’ tool, which was available for free on the Internet, he managed to unlock the device. This incident helped him to dive deep into the field. Soon Majumder realized that he could use his skills for social good. At the age of 16, he bagged his first Bug bounty reward from Tumblr<ref>{{Cite news|title=সোশাল মিডিয়ার ভুল ধরে অ্যামেরিকার সংস্থার পুরস্কার পেল কিশোর|work=[[ETV]]|url=https://www.etvbharat.com/bengali/west-bengal/state/darjeeling/siliguri-student-awarded-to-find-out-tumblr-bug/wb20191002170917050}}</ref>.

== Recent Works ==
[[File:Interview_With_TV9.jpg|thumb|Majumder's Interview With [[TV9 Bangla|TV9]]]]

=== 1. Leakage Of Covid-19 Test Reports: ===
In February 2021, Majumder claimed that he had discovered a highly critical vulnerability in the official website of Ministry of Health & Family Welfare (West Bengal) which if exploited could have resulted in the leakage of over 8 Million Covid-19 Test Reports<ref name=":1" />. According to Majumder, after discovering the flaw he quickly communicated with the [[Indian Computer Emergency Response Team|CERT-IN]] who acknowledged the breach to Majumder<ref name=":2" />. Sourajeet also claimed that he had reached out to the system coordinator, who manages the website but didn't receive any response from him. However, according to a media report<ref name=":4" /> few days after the incident, a government-appointed health official acknowledged the flaw and said it would be fixed immediately<ref name=":3" />. Later reports published by [https://en.wikipedia.org/wiki/Bleeping_Computer Bleeping Computer]<ref name=":1" /> and [https://en.wikipedia.org/wiki/TechCrunch TechCrunch]<ref name=":2" /> shared that the vulnerability was fixed and could no longer be exploited.

=== 2. Students Data Leaked Online: ===
In March 2021, Sourajeet claimed that PII data of thousands of Indian students could be easily accessed by a simple Google search technique<ref name=":6">{{Cite news|title=Data of 100,000 Indian Students Leaked Online, Claims Researcher|work=[[The Quint]]|url=https://www.thequint.com/tech-and-auto/data-of-100000-indian-students-leaked-online-claims-researcher#read-more}}</ref>. According to him this data was getting leaked from multiple websites belonging to educational institutes and from publicly uploaded documents on Scribd<ref name=":6" />. Majumder claims to have discovered the data of many private schools, college and university students which included students' names, parents' names, phone numbers, email addresses and Aadhar card numbers<ref name=":6" />.

Later in July 2021 similar concerns regarding the leakage and sale of Indian student's data was brought up the Internet Freedom Foundation<ref>{{Cite news|title=EXPLAINED: HOW THE STUDENT DATA BREACH LEAVES MINORS VULNERABLE TO SEVERAL THREATS|work=[[Firstpost]]|url=https://www.firstpost.com/tech/news-analysis/explained-how-the-student-data-breach-leaves-minors-vulnerable-to-several-threats-9839511.html}}</ref><ref>{{Cite web|title=Securing Examination Data: No Child’s Play|url=https://internetfreedom.in/securing-examination-data-no-childs-play-untitled/amp/|url-status=live|website=[[Internet Freedom Foundation]]}}</ref>

=== 3. Alleged Moneycontrol Data Breach: ===
In April 2021, Majumder tweeted that personal data of over 7 lakh registered users of Moneycontrol were available on a hacker's forum for just $350.<ref name=":5" /><ref name=":8">{{Cite news|title=Moneycontrol Resets Passwords En Masse After Alleged Data Breach Impacting 7 Lakh Users|work=[[Inc42]]|url=https://inc42.com/buzz/moneycontrol-resets-passwords-en-masse-after-alleged-data-breach/}}</ref><ref name=":7">{{Cite news|title=Moneycontrol.com data breach: Personal details of over seven lakh users up for sale on Hackers forums – Here is what we know so far|work=[[OpIndia]]|url=https://www.opindia.com/2021/04/personal-details-of-over-seven-lakh-moneycontrol-users-up-for-sale/}}</ref>. According to him the leaked data consisted of user emails and plain text passwords besides other details<ref name=":8" /><ref name=":7" />. Majumder further claimed that he was able to verify the login credentials which the hackers had shared as sample. This received a lot of attention and the Chief Technology Officer of Network18 replied to the tweet thread calling it an old data set with which Majumder highly disagreed<ref name=":7" />. A couple of days later it was found that a lot of users received a password change mail from Moneycontrol<ref name=":8" /> which Majumder in a press report called "a sneaky way" of asking users to change their passwords, without letting them know about the breach<ref name=":8" /><ref name=":5" />

Later in the month of May, [https://en.wikipedia.org/wiki/Troy_Hunt Troy Hunt] appreciated the efforts made by Majumder in bringing this breach out and added the leaked data set as a part of [https://en.wikipedia.org/wiki/Have_I_Been_Pwned%3F Have I Been Pwned]<ref>{{Cite web|title=have i been pwned?|url=https://haveibeenpwned.com/PwnedWebsites#Moneycontrol|url-status=live}}</ref>

== References ==
{{Reflist}}

== External links ==
{{commonscatinline}}

* [https://www.facebook.com/sourajeet.majumder.56 Official Facebook]
* [https://twitter.com/TechCrucio Official Twitter]

{{authority control}}

{{DEFAULTSORT:Sourajeet, Majumder}}
[[:Category:2003 births]]
[[:Category:Living people]]
[[:Category:Bengali people]]
[[:Category:Hackers]]
[[:Category:Security breaches]]
[[:Category:Cyber Security in India]]
[[:Category:Security Researcher]]
[[:Category:Technology]]