Short answer
A seller using the handle shinymontanna is advertising what it calls super administrator access to Vijay Sales' internal systems for US$25,000, reported on 29 October 2026. Vijay Sales had not responded or confirmed anything, and the claims have not been verified.
If you think your details were included, start with our checklist on what to do after a data breach.
Key facts
| Organization | Vijay Sales |
|---|---|
| Incident type | Data breach |
| Status | Claimed by attackers, unconfirmed |
| Sector | Electronics retail |
| Country | India |
| Detected | 2026-10-29 |
| Disclosed | 2026-10-29 |
| People or records affected | Claimed: more than 3 million order records, about 15,000 employees and about 140,000 vendor billing records. Unverified. |
What data was exposed
- Claimed: customer information and order records
- Claimed: employee information and vendor billing records
- Claimed: payment and bank transfer records, inventory data, financial reports and internal applications (none confirmed)
What is claimed
Around 29 October 2026, a seller using the handle shinymontanna posted what it calls super administrator access to the internal systems of Vijay Sales, an Indian electronics retailer, for US$25,000. Digit cites a post by the X account Dark Web Informer, and Inc42 reported the claim on 31 October.
This is an allegation. Neither outlet verified it, and neither saw proof of the access or of any stolen data beyond screenshots that were said to show admin dashboards.
What the listing says
The seller claims read, write and export permissions, more than 3 million order records, information on about 15,000 employees, and billing records for about 140,000 vendors. Inc42 adds that the listing mentions customer information, payment and bank transfer records, inventory, financial reports and internal applications.
Selling access is different from selling a dataset. If the access exists, the buyer could obtain whatever the account can see, but that is not the same as proof that data has already left.
What Vijay Sales has said
Nothing so far. Inc42 says the company did not respond to its queries. Digit says Vijay Sales had not responded and was unreachable when it wrote. We found no company statement or regulator notice. Inc42 reports the story in the same article as a separate probe by AU Small Finance Bank, but does not connect the two, and we do not either. We cover the bank claim in its own post.
A 2020 incident, where a Vijay Sales backup server was exposed, is unrelated.
What this means if you shop there
If the claim is true, order records could include names, phone numbers, addresses and what was bought, which is what a scammer needs for a convincing delivery or refund call. If it is false, scam messages that use the claim as a hook are still likely, because news of a breach gives fraudsters a ready excuse for “verify your order” texts.
Our guides to online shopping scams, phishing messages and what to do after a data breach cover what to check first. In India, report online financial fraud on the 1930 helpline or at cybercrime.gov.in.
What we will watch for
We will update this page if Vijay Sales confirms or denies the claim, if the data appears for sale, or if a regulator comments. See our editorial policy.
Scams to watch for after this breach
Criminals use breach news as cover. Expect messages that mention the incident, quote real details, or offer help.
- Fake order, delivery or refund messages that name a Vijay Sales purchase and link to a lookalike page
- Calls from someone posing as store or bank staff who quote an order and ask for a UPI PIN, OTP or card details
- Phishing aimed at vendors and employees, such as fake invoice or payroll updates
What to do if you are affected
- 01Do not act on messages about a Vijay Sales order unless you check the order in the official app or website you typed in yourself.
- 02Never share an OTP, UPI PIN or card CVV with a caller, whatever they say about your order.
- 03Check bank and card statements for charges you do not recognize, and report them to your bank quickly.
- 04Vendors and employees should treat invoice, bank-detail change and payroll emails with extra checking before paying or replying.
- 05Report phishing and online financial fraud through cybercrime.gov.in or the 1930 helpline.
Frequently asked questions
Has Vijay Sales confirmed a data breach?
No. Inc42 says the company did not respond to its queries, and Digit says Vijay Sales had not responded and was unreachable. Both state that the claims are unverified.
What is the seller offering?
Both outlets say a seller using the handle shinymontanna is offering what it describes as super administrator access for US$25,000, with permission to view, modify and export data.
What records does the seller claim to have?
More than 3 million order records, information on about 15,000 employees, and billing records for about 140,000 vendors. Inc42 adds customer information, payment and bank transfer records, inventory, financial reports and internal applications. None of this is verified.
Is this the same as the AU Small Finance Bank probe?
No link has been established. Inc42 reports both stories in one article, but it does not say they are connected.
Is this related to the 2020 Vijay Sales leak?
No. A 2020 leak through an exposed backup server is a separate, earlier incident.
Sources
This post summarises public reporting as of 2026-11-05. Details of live incidents change; we update posts when the organization or regulators publish new facts. Spot an error? See our editorial and corrections policy.