Alleged BookMyForex Incident Prompts YES Bank Card Blocks; Company Denies Data Breach
Published
Key Takeaways
- Incident Scope: BookMyForex, a subsidiary of MakeMyTrip, faced reports of unauthorized transaction attempts on YES Bank–issued multi-currency prepaid forex cards.
- Operational Disruption: Users are reporting service failures, including forex card balances showing zero and unauthorized debit notifications from remote locations.
- Threat Origin: Preliminary intelligence suggests the incident may have originated from threat actors based in Brazil, though attribution remains unconfirmed.
BookMyForex, the foreign exchange arm of MakeMyTrip, is responding to reports of unauthorized international transaction attempts on multi-currency prepaid forex cards issued by YES Bank.
Several customers reported disputed debits and access issues, while the company stated there was no data breach involving its systems or customer data.
Forex Card Transaction Reports Surface
The incident involves reports of Yes Bank and BookMyForex forex card security compromise. Customers traveling abroad have reported that their prepaid forex card balances have plummeted to zero.Â
Furthermore, thousands of customers reported receiving SMS alerts about unauthorized international transactions – in U.S. dollars and Brazilian real.
Clarifying their stance, a BookMyForex spokesperson told TechNadu that there was no data breach affecting BookMyForex systems or customer data. "YES Bank observed unusual volumes of false transaction attempts on YES BANK - BookMyForex Multi-Currency Prepaid Forex Cards which resulted in high number of declined transactions."
These transactions, they added, originated from a specific country. The bank promptly blocked transactions from the country that was identified as the source of all the malicious attempts.
"As a precautionary measure, cards involved in these attempted transactions were also proactively blocked. Customer balances remain fully secure." The company is currently monitoring the situation and working closely with the bank to take necessary steps.
They are also arranging complimentary replacement cards to ensure uninterrupted access to their forex balances, the spokesperson concluded.
Investigation and Response
Early indicators suggest the intrusion may have originated in a region of Brazil. However, definitive attribution is pending further forensic analysis. BookMyForex has also responded on X, stating there was no data breach.
The company's customer support channels are currently overwhelmed, reporting a threefold increase in traffic as distressed travelers attempt to resolve issues with their funds. Despite these internal upheavals, the primary website remains accessible.
Last week, the French Government disclosed a major breach of the national bank account registry.
Update: This story has been updated with statements, corrections, and explanations from a BookMyForex spokesperson.
Related
Get expert insights on threats, breaches, scams, and security trends — delivered every Monday.
Most Popular
Get expert insights on threats, breaches, scams, and security trends — delivered every Monday.
Most Popular