Zomato: Customer Credential Exposure

Events

GitHub enables two-factor authentication

September 3, 2013

Earlier Zomato vulnerability announced and mitigated

June 4, 2015

000webhost's user credentials leaked, including Zomato developer's personal account

October 27, 2015

This developer reused credentials between the personal 000webhost account and the Github account for use with Zomato code.

Zomato launches bug bounty program

February 4, 2016

HackRead breaks news of Zomato credentials for sale on Hansa

May 17, 2017

Zomato issues Security Notice

May 18, 2017

CTO Gunjan Patidar issues security notice.

Zomato: Security Update - What really happened? And what next?

May 23, 2017

CEO Deepinder Goyal and CTO Gunjan Patidar co-signed this statement.

Dutch National Police take control of Hansa

June 20, 2017

Zomato announces improved bug bounty program

July 1, 2017

Zomato hosts Huddle on Cyber Security

July 8, 2017

Hansa is shutdown

July 20, 2017

Zomato posts lessons learned from Huddle on Cyber Security

August 22, 2017