In what is being described as one of the largest data breaches in the country, personal information of more than 81.5 crore Indians has been exposed online. This shocking revelation emerged after an American cybersecurity and intelligence agency, Resecurity, detected the breach. The data, allegedly sourced from the Indian Council of Medical Research (ICMR), was posted on a forum known as Breach Forums by an individual using the alias 'pwn001.'
The breach, characterized as possibly the biggest data leak in India's history, raises concerns about the privacy and security of millions of citizens. To put this into perspective, the exposed records amount to around ten times the combined populations of countries like Iran, Turkey, and Germany. India, the world's most populous nation with 1.43 billion people, has now been exposed to a grave privacy threat.
The information leaked by 'pwn001' includes sensitive data such as Aadhaar and passport information, names, phone numbers, and addresses. The hacker claims to have obtained this data from Covid-19 test details of citizens registered with ICMR. As evidence of the breach, 'pwn001' posted spreadsheets containing samples of Aadhaar data, which upon examination, were verified as valid Aadhaar card IDs.
While there has been no official response from ICMR or the government regarding the breach, reports suggest that the Central Bureau of Investigation (CBI) is likely to initiate an investigation once a formal complaint is filed by ICMR. As a preventive measure and to manage the damage caused by the breach, authorities have implemented Standard Operating Procedures (SOP) and mobilized top officials from various government agencies and ministries.
The data breach has raised concerns about the vulnerability of sensitive personal information and the need for enhanced cybersecurity measures in the country. It highlights the urgency for stricter data protection laws and protocols to safeguard the privacy of Indian citizens. The breach serves as a stark reminder of the importance of cybersecurity and the ongoing battle against cyber threats that can compromise the personal information of millions.
As the investigation unfolds, the focus will remain on identifying the perpetrators responsible for the breach, understanding the extent of the data compromised, and implementing stricter measures to prevent such incidents in the future. In the digital age, securing personal data is of paramount importance, and this incident serves as a sobering reminder of the need for constant vigilance in the face of evolving cyber threats.