Data of 115 million mobile phone users, including all the personal details, has been put on sale on the Dark Web, a Pakistani cybersecurity company found.

Rewterz Threat Intelligence, a cybersecurity firm, found the data dump and said that the cybercriminal behind this data breach was demanding USD 2.1 million for the data. “This indicates that financially motivated threat actors are active in Pakistan and organizations are becoming a victim of these cyberattacks," stated the firm.

Rewterz, a pioneer of specialized cybersecurity services in Pakistan, has discovered a data dump of 115 million Pakistani mobile users data that have shown up for sale on the dark web today. https://t.co/ivAHS0dglr — Rewterz (@rewterz) April 9, 2020

Rewterz said that it had analyzed the samples of the data dump that was released on a popular dark web forum. IT said that the stolen data included users' personal details, such as full name, complete address, their mobile numbers as well as their CNIC and NTN numbers.

Rewterz said that the cybercriminal offering the data dump for sale was a VIP member of the dark web forum where the ad was posted. “Database is freshly hacked this week. That data was still being updated as I took the data down. Beautifully organized in a CSV with headers for your pleasure," the sale advertisement said.

The firm said, “Rewterz Threat Intelligence experts believe that the scale of this breach raises questions about the data security and privacy of telecom companies. This data can be an outcome of multiple breaches or a single breach, it’s too early to say at the moment”.

It is also unclear if any specific telecom operator or all telecom operators in Pakistan fell victim of this attack. Nonetheless, if a breach had happened it should have been disclosed for customer’s knowledge, it said.

“It might be possible that these telecoms companies failed to disclose the breach because they aren’t aware of the hack or have intentionally opted not to reveal. It’s concerning for customers whose information has been published,” Rewterz added.