Hacker claims super admin access to Vijay Sales systems, offers it for $25,000 on dark web

A claim of a cyber attack on the internal systems of Vijay Sales, a company that sells electronics and home appliances, has surfaced. An alleged hacker says they have obtained super administrator access to the company's systems and have put it up for sale on the dark web for $25,000. The claims have not so far been confirmed by any independent source.

The alleged listing is said to include more than 30 lakh order records, details of about 15,000 employees and billing records of 140,000 vendors.

The matter came to notice after a post was shared on the social media platform X. The post says that an alleged threat actor operating under the name 'shinymontanna' has claimed to have broken into Vijay Sales' internal systems. According to the listing, this person has super administrator access to the company's systems and has priced it at $25,000.

It is still not clear whether the company's systems have actually been breached. It is also not known how much data was affected or what kind of information went out. For now, it should be treated only as an unverified cybersecurity claim.

The data mentioned in the listing covers a range of information relating to customers, employees and business partners. It lists more than 30 lakh customer order records, details of about 15,000 employees, billing records of 140,000 vendors, customer information and payment-related entries, bank transfer details, inventory data and financial reports.

If the claims prove true, serious questions could arise over the confidentiality of information belonging to customers, employees and business partners. However, there is no official confirmation that this information has actually been stolen or has reached the wrong hands.

According to the listing, super admin access also allows data to be read, modified and exported. If such access has indeed been obtained, the person could gain the ability to view or download sensitive business information. In some circumstances there is also a risk of unauthorised changes to the data.

To back the claim, the alleged threat actor has shared screenshots showing an administrative dashboard and super admin permissions. Even so, screenshots alone cannot conclusively confirm a cyber attack or data theft.

Vijay Sales was contacted for its side of the matter, but no response has come from the company so far. How large the alleged attack is, which systems were affected and how likely a data leak is will become clear only after the company issues an official statement.

Until then, customers are advised not to click on unknown links, to be wary of suspicious emails or messages, and not to share banking or payment details with anyone. The company has not yet confirmed the claim, so there is no need to panic, but it is important to stay alert.