/dq/media/agency_attachments/UPxQAOdkwhCk8EYzqyvs.png)
Follow Us/dq/media/post_banners/wp-content/uploads/2023/11/INDIANS-AADHAR-DATA-LEAKED-ON-DARK-WEB.png)
According to a report published by News18, there was a severe Aadhaar card data breach happening across India. In this data breach personal information of approximately 8.15 crore Indians including Aadhaar numbers, passport details, phone numbers, and addresses has been exposed. The breach was initially discovered by an American cybersecurity firm ‘Resecurity’ and raised serious concerns about data security and privacy in India.
The breach came to light when Resecurity found a post on Breach Forums where a threat actor was using the alias ‘pwn001’ and was advertising a massive database containing sensitive personal information along with spreadsheets as proof of its data’s authentication. The information included all crucial identification details of an individual like Aadhaar numbers, passport details, phone numbers, and addresses of millions of Indian citizens. The threat actor has also put this vast database for sale which raised concerns about its potential misuse.
The data is supposed to have been sourced from the Indian Council of Medical Research (ICMR) and is believed to be related to the pandemic record. In response to this alarming situation, the Indian Computer Emergency Response Team (CERT-In), and the National Cybersecurity Agency have taken action. CERT-In has promptly informed the ICMR about the data leakage and has been working together to determine the extent of the breach.
In terms to prevent any potential damage and mitigate risks, a standard operating procedure (SoP) has been deployed. Additionally, it is also reported that the Central Bureau of Investigation (CBI) is likely to launch an investigation into this matter once an official complaint is filed by ICMR.
How to protect personal information?
The breach is a reminder for all about the importance of data security and the need for potent cybersecurity practices. Citizens can prevent these kinds of situations by being vigilant and taking steps to secure their personal information such as
- Regularly updating passwords
- Enabling two-factor authentication
- Being cautious about sharing sensitive data.
As the investigation continues along with the efforts to contain the breach. It seems like it a high time for India to strengthen its data protection laws and cybersecurity frameworks to safeguard the privacy and security of its citizens.