Five days after what earlier reported as a breach of data from telecom major Jio owned by Mukesh Ambani, the Police has provided has finally shed more light on the same. The update comes just a day after the accused, who turned out to be a computer science dropout, was arrested where the Police told the Press Trust of India (PTI), that it was not a case of data theft but instead a case of "unauthorised access".
Navi Mumbai deputy commissioner of police, Tushar Doshi clarified to PTI that it was not a case of data theft. Doshi explained that accused got access to the telecom operator's servers by using the back end, which is currently used by retailers to provide a recharge for Jio subscribers.
“He got hold of a user ID and password and he could manage to access this data,” said Doshi referring to Imran Chippa a resident of Sujangarh town in Rajasthan.
Using this User ID and password, Chippa gained access just like every other retailer out there, but also managed to pull out details like a RJio subscriber's name, email ID, SIM activation date, telecom circle and alternate number. All of this was accessible by entering an RJio number in the search command.
Chippa told the police that he had made the website Magicapk as he wanted to provide Jio user data through his website.
According to a report by The Indian Express, Chippa wanted to create a search engine. After getting access to the data, the accused "designed designed a software, which he used to transfer the data he had obtained from the application on to the website," said a senior police officer.
"To operate the search engine, you would have to know either the name or phone number of a customer. And the most you could learn from search results was the region in which the customer’s phone was active," the officer told The Indian Express.
As of now the police have yet to find out the software used to extract the data. Chippa will be brought to Navi Mumbai.
What is surprising is that the accused had plans to add data from other telecom firms a well, but to everyone's luck had not figured out how to go about it.
The case according to PTI is being probed jointly by the Navi Mumbai Police and the Maharashtra Cyber Cell.
The police also recovered 50 SIM cards from Chippa, most of which Reliance Jio. He is currently being interrogated to ascertain the purpose for obtaining so many SIM cards.
“It will take some time to know Chippa’s modus operandi and the number of people involved in the data leak,”the official said.
Disclaimer: Reliance Industries Ltd. is the sole beneficiary of Independent Media Trust which controls Network18 Media & Investments Ltd.