Dream11, a popular fantasy sports app, was recently involved in a significant data breach scandal. Abhishek Pratap Singh, the Security Director of Dream11’s parent company, Sports Technology Pvt. Ltd., was arrested for attempting to extort money by threatening to leak sensitive data. The breach came to light when Singh sent an email to senior executives at Dream11, attaching 61 files that contained crucial company data, demanding payment to prevent the information from being released on the dark web.
The extortion attempt began on August 11, when Singh emailed five top executives, including CEO Harsh Jain, warning them about the impending leak. Dream11’s IT department responded, trying to negotiate, but Singh persisted, stating that many buyers were interested in purchasing the data. His demands and the threat of data exposure escalated the situation, leading to immediate action from Dream11’s staff, including a complaint filed with the Maharashtra Cyber Department.
Following the complaint, police acted swiftly and arrested Singh at his residence in Bengaluru. During the arrest, the police recovered the laptop and mobile phone used in the extortion attempt. Dream11’s systems, which could have been severely compromised if the data were leaked, were at risk of collapsing, further intensifying concerns about the breach. The arrested individual has been remanded to police custody for further investigation into how he gained access to the sensitive data.
Authorities are now investigating the extent of the breach and examining whether Singh acted alone or with others. The case, which is being handled under various sections of the Indian Penal Code and the Information Technology Act, has raised concerns about the safety of user data on popular apps like Dream11. The incident also highlights the importance of stringent data protection measures to safeguard users and companies from such internal threats.
Reference: