Never miss a great news story!
Get instant notifications from Economic Times
AllowNot now


You can switch off notifications anytime using browser settings.
11,921.50-96.9
Stock Analysis, IPO, Mutual Funds, Bonds & More

Nykaa fixes a data security bug

While the security bug was fixed in two days, it could have led to hackers and telemarketers mining the data of about million users, said security researcher Ehraz Ahmed, who notified Nykaa of the flaw. However, Nykaa says there has been no breach...

, ET Bureau|
Updated: Nov 18, 2019, 08.38 AM IST
0Comments
BCCL
falguni-nykaa2-bccl
Nykaa has been ramping up its offline push in tier-two cities even as it faces stiff competition from Amazon and Flipkart, which finds beauty emerging as a fast-growing category.
BENGALURU: Nykaa Fashion has fixed a security vulnerability that could have potentially risked the details of nearly one million customers, including order details, mail identities, names, phones numbers and email addresses.

“A potential API flaw was reported in our Nykaa Fashion database through our Vulnerability Disclosure and Bug Bounty Program in which we work with researchers to detect security issues in our system. This was fixed immediately and there has been no breach of personal or financial data,” said Sanjay Suri, chief technology officer, Nykaa, in a statement.

Nykaa has been ramping up its offline push in tier-two cities even as it faces stiff competition from Amazon and Flipkart, which finds beauty emerging as a fast-growing category.

Security researcher Ehraz Ahmed, who notified Nykaa of the flaw, told ET it was fixed in two days. “One of their Internal APIs can log you into any Nykaa Fashion account, bypassing your Email Address into the request, and in response, it returns with the Access Token,” he wrote in a blog post. “Hackers and Telemarketers can mine the data...(of about a million users) by automating a script using a phone number dump found online.”

Also Read

Wedding season is here! Nykaa founder's daughter, Adwaita, marries Anubhav Gupta in a fairytale ceremony

Nykaa pushes offline in Tier 2, shows rising orders from beyond metros

Wedding bells: Nykaa boss Falguni Nayar's daughter set to tie the knot this year

Being fashion forward: Nykaa will diversify, but does Falguni Nayar have enough ammunition to make it big?

Comments
Add Your Comments
Commenting feature is disabled in your country/region.
Download The Economic Times Business News App for the Latest News in Business, Sensex, Stock Market Updates & More.

Other useful Links


Follow us on


Download et app


Copyright © 2019 Bennett, Coleman & Co. Ltd. All rights reserved. For reprint rights: Times Syndication Service