22,690 Trice India Records Breached: Usernames and Phone Numbers Exposed

In November 2024, Trice India, an industrial solutions provider based in India specializing in air treatment systems, bearings, couplings, and power tools, suffered a database breach that exposed 22,690 user records. While that number is smaller than the voter roll of a mid-sized Indian district, it is large enough to fuel targeted phishing calls, social engineering scams, and account takeover attempts against real people. The data surfaced on a well-known dark web forum, where a sample was shared and confirmed as authentic.

Why This Is Dangerous

A breach that exposes phone numbers and usernames may seem minor compared to leaks that include passwords or financial data. But for attackers, this combination is a reliable starting point. Phone numbers enable SMS phishing (smishing) and SIM-swap fraud. Usernames confirm which accounts exist on a platform, eliminating guesswork and making credential-stuffing attacks more efficient. When these identifiers are matched against other leaked datasets, the risk compounds significantly.

What Was Exposed

• Phone numbers linked to customer or user accounts
• Usernames from the Trice India platform
• Approximately 22,690 records confirmed in the leaked dataset
• Breach type: Database exfiltration (likely SQL injection or compromised credentials)
• Date leaked: November 16, 2024

Why This Matters

Even without passwords, the data exposed in the Trice India breach opens several attack paths:

• Credential stuffing: Usernames are matched against passwords from other breaches and tested across popular services.
• Account takeover: Attackers use phone numbers to trigger SMS-based account recovery flows on platforms the victim uses.
• Identity theft: Combined with data from other breaches, phone and username pairs help build detailed profiles used for fraud.
• Targeted fraud calls: Scammers use real phone numbers to impersonate Trice India or related vendors to extract further information.

How Database Breaches Work

A database breach occurs when an attacker gains unauthorized access to a company's backend data store. The most common methods include SQL injection attacks, where malicious queries are used to extract table contents, and compromised administrative credentials obtained through phishing or prior breaches. Once inside, an attacker can dump entire tables in minutes. Industrial and manufacturing companies are frequent targets because their cybersecurity investment often lags behind the sensitivity of the data they hold.

Check If You Are Affected

If you ever registered on Trice India's platform or provided your phone number in connection with their services, your data may be in this breach. Heroic's breach search tool indexes over 400 billion leaked records, making it one of the most comprehensive lookup tools available. Search your email address or phone number now to see if your information appears in this or any other known breach.

Search the Heroic 400B+ database now and find out if your data was exposed.