Personal data including Aadhaar number of 50 lakh Indians leaked from this government website

0


According to Bengaluru-based cyber-security firm TechniSanct, data from Tamil Nadu’s Public Distribution System (PDS) was breached and a database containing personal information of around 5 million users was also uploaded to hacker forums. The leaked data included Aadhaar numbers of users as well as sensitive information of beneficiaries, such as their family details and mobile numbers. Hackers can use the leaked data to launch a phishing attack and target easily deceived people, including the elderly, in the state. However, the state government is yet to publicly confirm the breach.

According to the cyber-security startup, the data that was leaked on the web included information of a total of 49,19,668 people from Tamil Nadu. This included 3,59,485 phone numbers as well as postal addresses and Aadhaar numbers of the affected users. The leaked database, checked by Gadgets 360, also contains ‘Makkal numbers’, which the state government has used to keep records of all citizens, including newborn babies. commenced was.

In addition, the leaked data also included information on the family members of the beneficiaries and their relationships with them. The matter was first reported by The Week published Had it.

It is not clear at this time whether the data was hacked directly from a website linked to the Tamil Nadu government or from a third party vendor. However, the database shows that this appears to be a very small part of the total database, as the site of Tamil Nadu Civil Supplies and Consumer Protection Department has dashboard As per reports, there are more than 6.8 crore registered beneficiaries for the PDS system.

TechniSanct CEO Nandakishore Harikumar has told Gadgets 360 that this leaked data was uploaded on June 28 and detected on the same day, but was removed about an hour later.

TecniSanct also found that there was an attack on the website of Tamil Nadu Civil Supplies and Consumer Protection Department (tnpds.gov.in), which was carried out by cybercriminal group “1945VN”. However, it is not clear whether there is a connection between that attack and the latest breach.



Source link