KiranaPro Suffers Cyberattack: Servers Wiped Clean
Indian grocery startup KiranaPro experienced a severe security breach, resulting in the deletion of its servers, according to confirmation from the CEO. This incident underscores the increasing cyber threats faced by startups, particularly those handling sensitive customer data.
The Attack
Indian grocery delivery startup KiranaPro has suffered a severe cyberattack, leading to the deletion of its servers and critical data. Co-founder and CEO Deepak Ravindran confirmed the breach, stating that hackers gained root access to the company’s Amazon Web Services (AWS) and GitHub accounts, resulting in the erasure of essential data, including app code and sensitive customer information such as names, addresses, and payment details.
The breach occurred between May 24 and 25, 2025, and was discovered on May 26 when executives noticed suspicious activity during an AWS login attempt. The attack is believed to have originated from a former employee’s credentials, highlighting the risks associated with insider threats.
In response, KiranaPro has filed a complaint with the cybercrime cell and is collaborating with ethical hackers and forensic experts to investigate the incident. The company has also reached out to GitHub for assistance in retrieving compromised repositories from internal backups and audit logs.
The cyberattack has significantly disrupted KiranaPro‘s operations, halting its services and impacting its user base of approximately 55,000 customers across 50 cities. The incident has also affected the company’s fundraising efforts, with partnerships worth ₹5 crore on hold and daily losses of around 2,000 orders.
This event underscores the critical importance of robust cybersecurity measures, including timely deactivation of former employees’ access and comprehensive data backup strategies, to protect against potential insider threats and ensure business continuity.
For more detailed information on this topic, you can refer to the following articles:
Cyberattack wipes out KiranaPro’s servers, app code and sensitive data
Grocery delivery app KiranaPro faces cyberattack, servers deleted; CEO says legal proceedings on
Indian grocery startup KiranaPro was hacked and its servers deleted, CEO confirms
Impact on Customers
Indian grocery delivery startup KiranaPro has suffered a severe cyberattack, leading to the deletion of its servers and critical data, including sensitive customer information such as names, mailing addresses, and payment details. The breach has rendered the platform inoperable, halting services for its 55,000 customers across 50 cities. The company is actively investigating the incident and working to restore its systems.cyberpress.orgampcuscyber.com
According to CEO Deepak Ravindran, the attack occurred between May 24 and 25, 2025, and was discovered on May 26 during an AWS login attempt. The breach is believed to have originated from a former employee’s credentials, highlighting the risks associated with insider threats. The company has filed a complaint with the cybercrime cell and is collaborating with ethical hackers and forensic experts to investigate the incident. techcrunch.com
In response to the breach, KiranaPro is implementing enhanced security measures to prevent future incidents. The company is also working to restore its systems and services to minimize disruption for its customers. Customers may experience delays or disruptions in accessing the platform during this recovery period.cyberpress.org
This incident underscores the critical importance of robust cybersecurity measures, including timely deactivation of former employees’ access and comprehensive data backup strategies, to protect against potential insider threats and ensure business continuity.
For more detailed information on this topic, you can refer to the following articles:
Cyberattack wipes out KiranaPro’s servers, app code and sensitive data
Grocery delivery app KiranaPro faces cyberattack, servers deleted; CEO says legal proceedings on
Indian grocery startup KiranaPro was hacked and its servers deleted, CEO confirms
Security Implications for Startups
This incident highlights the vulnerability of startups to cyberattacks. Startups, often operating with limited resources, may struggle to implement robust security measures. This breach serves as a reminder for startups to prioritize cybersecurity and invest in protecting their systems and data.
Key Takeaways:
- Cyberattacks pose a significant threat to startups.
- Data security is crucial for maintaining customer trust.
- Startups must prioritize cybersecurity measures.
