Starhealth Insurance Debacle: Information warfare using fabricated evidence

**Executive Summary:** CloudSEK’s XVigil discovered threat actor "xenZen" selling 7TB of Star Health Insurance data containing personal and medical records for ~31.2 million customers and ~5.76 million claims; sample data appears authentic but claims that the company’s CISO and executives sold the data are likely fabricated. Analysis suggests the actor leveraged leaked credentials and an IDOR-exposed API to exfiltrate data, created a dedicated website and Telegram bots to distribute samples, and may have geopolitical motives in addition to financial gain.