Vijay Sales allegedly hacked: Hacker claims access to 30 lakh orders, demands ₹24 lakh
Indian electronics retailer Vijay Sales has reportedly become the latest target of cybercriminals, with a hacker claiming to have access to the company’s internal systems. The alleged breach has surfaced on a dark web marketplace, where an account is offering to sell what it describes as “super administrator” access to the retailer’s systems for $25,000, or roughly ₹24 lakh. The seller claims the access includes millions of order records and sensitive business information.
According to reports, the seller is using the name “shinymontanna”. The account claims it can access customer records, payment histories, inventory information and financial reports. Screenshots of an alleged administrative dashboard have reportedly been shared to support the listing. The claims remain independently unverified, and there is no confirmed evidence yet that Vijay Sales has suffered a successful system-wide breach.
🚨🇮🇳 Vijay Sales allegedly compromised, super administrator access and millions of records offered for sale
An actor using the handle “shinymontanna” is selling alleged super administrator access to the internal systems of Vijay Sales, a major Indian electronics retailer, for $25,000.
The listing claims access to over 3 million order records, information on 15,000 employees, and billing records for approximately 140,000 vendors.
The advertised access reportedly includes customer information, payment and bank transfer records, inventory, financial reports, and internal applications, with read, write, and export permissions.
Screenshots showing administrative dashboards and super administrator permissions have been published.
Claim is currently unverified.
💥 No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. https://t.co/281Qjc6p2J
— Dark Web Informer (@DarkWebInformer) October 29, 2026
What happened in the alleged Vijay Sales cyberattack?
The threat actor reportedly advertised access to a high-level administrative account associated with Vijay Sales.
In cybersecurity terms, super administrator access is particularly sensitive. Such an account may allow someone to view confidential information, manage users, change system settings and interfere with everyday business operations.
The seller claims the account can make changes within the retailer’s systems.
If genuine, this could create risks beyond the exposure of customer information. Attackers might attempt to alter business records or interfere with internal processes.
:
What customer and company data is allegedly exposed?
The dark web listing reportedly makes several claims about the scale of the information accessible through the alleged account.
| Alleged exposure | Details claimed |
|---|---|
| Asking price for access | $25,000, approximately ₹24 lakh |
| Customer orders | More than 30 lakh |
| Employee records | Around 15,000 |
| Vendor billing records | Around 1.4 lakh |
| Other information | Payment history, bank transfer records, inventory and financial reports |
These figures come from the seller’s claims and should not be treated as confirmed stolen records.
:
Who is behind the alleged Vijay Sales breach?
The seller reportedly operates under the online name “shinymontanna”.
There is currently no verified information establishing the individual’s identity, location or connection to an organised hacking group.
Investigators would need to establish whether the account actually possesses working administrator credentials or is attempting to sell fake access.
:
What has Vijay Sales said?
As of October 30, no official company statement confirming the alleged breach could be independently established from the sources reviewed.
The company has not been shown to have confirmed the authenticity of the advertised administrator access or the reported customer records.
:
What happens next?
The immediate question is whether the advertised access is genuine.
A technical investigation would need to establish how the alleged account was obtained, whether anyone accessed sensitive records and whether the seller’s screenshots represent a working system.