India's telecom department will reportedly ask Mukesh Ambani-led 4G telco, Reliance Jio, to provide details of the recent subscriber data breach, Telecom Secretary Aruna Sundararajan told media during a recent industry event. "They have not come to us, but we will seek details from them," Sundararajan was quoted as saying by media reports.
Earlier reports claimed that Reliance Jio customer data, including mobile numbers and other details users, were allegedly leaked on an independent website. Jio had roped in consultancy EY to investigate the alleged data breach. The agency's initial investigation showed that alleged breach of Reliance Jio’s customer base showed that all of the telco’s apps and sites were secure and that the breach, if any, could have been at the external vendors’ end.
Following the incident, Reliance Jio filed a police complaint with the Navi Mumbai cyber crime cell. Primary police investigations showed that there had been no theft of data. "No data has been moved, and there has been no sensitive data leaked. Also, all details of customers were not available," Tushar Doshi, deputy commissioner of police (Crime) for Navi Mumbai was quoted as saying. The official said that Jio's team of vigilante officers are in touch with him.
The police have already arrested a 35-year-old computer science dropout, Imran Chhimpa, from Rajasthan for his alleged involvement in the case. Chhipa had made the website Magicapk, and claimed to provide Jio user data through his website, police said.
A Maharashtra Cyber Police senior officer confirmed that some leak had occurred but declined to share details about the quantum of the breach.