INDIAN PHARMACY CHAIN GIANT EXPOSED CUSTOMER DATA AND INTERNAL SYSTEMS

Summary from the TLDR InfoSec newsletter

A misconfigured “super admin” interface at DavaIndia Pharmacy, part of Zota Healthcare, allowed anyone to create high-privilege accounts and access data on nearly 17,000 online orders across 883 stores, including names, contacts, addresses, and purchased medicines. Attackers could have altered pricing, discounts, and prescription requirements before the flaw, reported to CERT-In in August 2025, was quietly fixed.