Alleged Bharat Matrimony User Data For Sale On Dark Web

Cyble identified a darkweb listing claiming a threat actor exploited an SQL Injection to extract and sell the 'matrimonyms' database and related user records from BharatMatrimony (and associated sites) — reportedly over 3 million plaintext email/password lines plus contact, family and server details — offered for sale for about USD 500 in bitcoin. BharatMatrimony responded that the disclosed data is from an old database and that active customer databases and sensitive information were not compromised; Cyble recommends affected users monitor exposure, enable MFA, use strong passwords, and use their AmiBreached service to check for exposure.