If You Bought From Divya Kamdhenu, the December 2024 Breach Should Worry You

In December 2024, Divya Kamdhenu, an Indian producer of A2 Desi Gir Cow Ghee sold directly to consumers, had its customer database exposed on a dark web marketplace. The breach covered 8,851 customer records and included enough contact and identity information for targeted fraud and social engineering attacks. If you ordered from Divya Kamdhenu or registered on their site, your contact details may be in the hands of people who intend to misuse them.

Why This Is Dangerous

Small e-commerce and direct-to-consumer food brands often hold detailed customer records, including phone numbers and full names, without investing heavily in data security. This breach exposed exactly the kind of data that enables SIM-swap fraud, phishing calls, and SMS scam campaigns. Attackers specifically target niche consumer brands because their customers are less likely to be watching for fraud tied to that purchase relationship.

What Was Exposed

• Email Address
• Phone Number
• First Name
• Last Name

Why This Matters

A phone number combined with a full name and email address gives attackers three independent ways to reach you. They can impersonate a delivery service, a bank, or even Divya Kamdhenu itself to extract more sensitive information. This combination also supports identity theft, where fraudsters use real personal details to open credit accounts or verify ownership of existing ones. Credential stuffing attacks using the exposed email addresses are an additional risk for anyone who reuses passwords.

How Consumer Database Breaches Work

Consumer-facing businesses store customer data in databases to manage orders and communications. When security controls are insufficient, attackers gain access through vulnerabilities in web applications, exposed admin panels, or third-party integrations. Once inside, they export customer tables and sell the data in bulk. Small companies often have no monitoring in place to detect this kind of quiet exfiltration, meaning the breach may not be discovered until the data is already circulating on underground forums.

Check If You Are Affected

HEROIC's free breach scanner checks your email address against more than 400 billion exposed records, including this Divya Kamdhenu dataset. If your information was part of this breach, you will know right away. Run a free scan at HEROIC now and find out what has been exposed about you.