On 25 February 2021, an Indian security researcher named Rajshekhar Rajaharia claimed that a hacker group called Jordandaven stole the KYC details of nearly 100 million MobiKwik users from a company server and put them up for sale on the dark web.[30] On 4 March 2021, company denied the claim and said it would take legal action against the researcher. Later, multiple independent researchers and users confirmed that their Mobikwik data was available online,[31] and on 30 March 2021, TechCrunch reported that company was hiring a third-party to conduct a forensic data security audit.[32]