Data Breach Hidden 67 Days: Is Your Money Safe?
A wearable health app exposed users' personal and transaction data to hackers — and told them 67 days later. If your data leaks, criminals can use it to steal your identity, fake loan applications, or drain your bank account.
Your gym data can cost more than your gym membership if sold on the dark web.
Companies can hide your data breach from you for over 2 months
Key Takeaways
Check your email and SMS for any breach notification from apps you use — health, fitness, fintech, or shopping.
Freeze or monitor your CIBIL report immediately if your phone number, email, or transaction data was exposed in any breach.
Change passwords on any app that stores your payment details, and enable two-factor authentication on your bank and UPI accounts.
A wearable health app exposed users' personal and transaction data to hackers — and told them 67 days later. If your data leaks, criminals can use it to steal your identity, fake loan applications, or drain your bank account.
Here's what happened: A popular wearable health app suffered a cyberattack exposing users' contact details, transaction history, and fitness data.. Hackers gained unauthorised access on March 27 but affected users were only notified on June 2 — 67 days later.. India has no strict breach notification deadline yet; the Digital Personal Data Protection Act 2023 rules are still being finalised..
What you should do: Check your email and SMS for any breach notification from apps you use — health, fitness, fintech, or shopping.. Freeze or monitor your CIBIL report immediately if your phone number, email, or transaction data was exposed in any breach.. Change passwords on any app that stores your payment details, and enable two-factor authentication on your bank and UPI accounts..
Pro tip: Under India's DPDP Act 2023, once notified, you have the right to demand deletion of your personal data from any app — exercise it if you no longer use the service.
Draft a Free RBI Complaint
Loan Kavach walks you through the RBI CMS process. No lawyer, no fee. Escalate to the RB-IOS Ombudsman if unresolved in 30 days.
Get Loan Kavach — Free →Facing recovery harassment from a lender?
Loan Kavach's legal team intervenes within 24h, files RBI complaints, and shields you from unlawful recovery practices — available in the GoCredit app.
References
- [1]“Ultrahuman suffers a major security breach, exposing users’ wellness data: How did it happen?” MEDIANAMA · 4 Jun 2026
This article is reported by GoCredit's Editorial Team based on the source above. GoCredit synthesises, contextualises, and adds India-borrower-relevant analysis. We are not the original publisher.