Credit Information Bureau India [CIBIL] — malpractices in selling report

They collect credit card number from all lenders and it is visible on report.

Report once pulled can be viewed by cibil by way of tools. They are not pcidss complaint and they maintain credit card numbers.

Report pulled which can be accessed by many, has credt card number. There is no guanrantee that the number is secure and will not be misused.

They have kept the match logic very loose because of which reports of two or more people get mixed. This is to sell more and more reports.

They do not have past data submitted by lenders and when dispute is raised they solve the case themselves without any data.

Their senior employee has said that management takes bribe for solving dispute on reports.

Commercial report pertaining to companies is completely split into many parts. They call company to check which loan belongs to them which defeats the purpose of the report.