Back to Radar
RE

RentoMojo

High

RentoMojo suffered a breach in April 2023, exposing over 2M user records including IDs, passwords, and contact information.

Records exposed
2,185,697 records
Breach date
Breach Apr 15, 2023
Last update
Updated May 10, 2023
Source

What data was exposed?

Fields reported as compromised in this breach record.

Dates of birthEmail addressesGendersGovernment issued IDsNamesPassport numbersPasswordsPhone numbersPurchasesSocial media profiles

Why does this breach matter?

In-depth analysis of the breach and its implications.

In April 2023, RentoMojo, a rental service based in India, experienced a significant data breach affecting approximately 2.18 million user records. This security incident resulted in the exposure of sensitive personal information, including names, contact details, government-issued IDs, passport numbers, purchase histories, and bcrypt password hashes. The breach underscores the critical importance of robust data protection practices, particularly for companies handling sensitive user data.

Impact Analysis

Understanding the scope and consequences of this breach.

User Impact
Users may face identity theft risks, phishing attempts, and unauthorized account access.
Business Impact
The incident could lead to reputational damage, customer trust erosion, and potential regulatory scrutiny.
Affected Sectors
  • Rental services
  • E-commerce
Geographic Impact
  • India

What You Should Do

Recommended actions to take in response to this breach.

If You Were Affected

  • •Change passwords on accounts associated with RentoMojo.
  • •Monitor bank and online account activity for unauthorized transactions.
  • •Be cautious of phishing emails referencing RentoMojo.

Preventive Measures

  • •Enable two-factor authentication on accounts.
  • •Use strong, unique passwords for online accounts.
  • •Regularly review data security practices for vendors handling your data.

Frequently Asked Questions

Common questions about this breach and what it means for you.

Change associated passwords, enable multi-factor authentication, and monitor accounts for irregularities.