Dark web listing contradicts Dodo Payments’ data breach disclosures

Dodo Payments, a Bengaluru-based payments company, told its customers on August 17 that a breach of an internal analytics system did not touch API keys, passwords, or account credentials. However, the threat actor’s website on the dark web, reviewed by MediaNama, describes a stolen dataset from the company that includes the data types labeled as: “KYC verification requests, identity verifications and requests, bank verification requests, business phone and verification requests, UBO requests, pa