Archive — US — techcrunch
After its data was wiped, KiranaPro’s co-founder cannot rule out an externalhack
KiranaPro, an Indian grocery delivery startup, experienced significant data loss, potentially due to an internal breach related to a former employee. Co-founder Deepak Ravindran cited mishandled employee offboarding procedures, complicating the investigation into the incident. The startup has since regained access to some data but acknowledges ongoing vulnerabilities and has involved legal advisers for a thorough investigation.
Key points
- KiranaPro's data loss incident involved the deletion of all app code from GitHub.
- Co-founder Deepak Ravindran blamed a former employee who had not been properly offboarded.
- The company is unsure whether the breach was solely internal or if external factors were involved.
- Ravindran claimed that the AWS account was protected but could not guarantee it was not accessed maliciously.
- No multi-factor authentication on the former employee's devices may have allowed access.
- Despite recovering some data, KiranaPro is conducting a forensic investigation and has yet to file a formal police complaint.
Why it matters
- The incident reflects broader issues in cybersecurity, particularly regarding data management and employee offboarding practices.
- The growing concern over internal breaches in tech firms highlights the need for enhanced security protocols.
- Similar data breaches in tech and startup environments have led to stricter regulatory scrutiny and investor caution.
The KiranaPro incident underscores the critical importance of proper data security practices and employee offboarding in tech startups, particularly in the evolving landscape of cybersecurity threats.