Aadhaar Details Of Govt Workers In Jharkhand ‘Leaked’

Aadhaar Details Of Govt Workers In Jharkhand ‘Leaked’

SUMMARY

Reported Aadhaar data breach has details as far back as 2014

French security researcher Elliot Alderson helped in uncovering the leak

The SBI recently alleged that UIDAI data has been misused to generate unauthorised Aadhaar cards

Yet another case of leaked Aadhaar details has emerged in India, with TechCrunch claiming that the unique identification numbers (UIN) of government workers in Jharkhand were left exposed and without a password on the state government’s website.

The reported breach, which had details going as far back as 2014, allowed anyone to access the names, job titles, and partial phone numbers on 166,000 workers. Besides, the filenames of the workers’ photos — which too were exposed on the site — were their Aadhaar numbers.

Although the data leak isn’t a direct breach of the central database run by Aadhaar’s regulator — the Unique Identification Authority of India (UIDAI) — the incident raises concern about how this personal data is being handled.

According to TechCrunch, it’s unclear why the Jharkhand government site was accessible to anyone who knew where to look, but little effort had been put in to ensure the security of the system.

Baptiste Robert, a French security researcher who goes by the online handle Elliot Alderson, participated in uncovering the leak. Using less than a hundred lines of the Python code, Robert showed that it was easy for anyone to scrape the entire site in batches to download their photos and corresponding Aadhaar numbers.

Aadhaar Blame Game

Security concerns over Aadhaar seem to be a never-ending tale of claims and counterclaims. Just this week, India’s largest bank, SBI, alleged that data from the UIDAI had been misused wherein the logins and biometrics of Aadhaar operators were used to generate unauthorised Aadhaar cards. The UIDAI refuted these claims, maintaining that everything was secure at their end.

Incidentally, it also later emerged that the SBI had an unprotected server that allowed anyone to access financial information on millions of its customers, like bank balances and recent transactions.

According to the Supreme Court’s ruling from September, Aadhaar is mandatory only for filing income tax returns and for the allotment of PAN. It won’t be essential for opening bank accounts or getting SIM cards from telecom operators. The effect of this judgement, however, doesn’t seem to dampen the government’s push to make Aadhaar the cornerstone of its schemes.

Union minister of law, electronics, and information technology Ravi Shankar Prasad is planning to make it mandatory for Indians to link their Aadhaar card with their driving licences.

India’s former national security adviser, MK Narayanan, recently raised caution on the use of Aadhar cards, saying that the use of these cards is becoming more ubiquitous every day. It is also getting increasingly easier to mask an identity online.

You have reached your limit of free stories
This Diwali, Get Up To 72% Off On Inc42 Plus

Become A Startup Insider With Inc42 Plus

Offer Fading Away This Week
countdownmail.com
2 YEAR PLAN
₹19999
₹6999
₹291/Month
UNLOCK 65% OFF
Cancel Anytime
1 YEAR PLAN
₹9999
₹3999
₹333/Month
UNLOCK 60% OFF
Cancel Anytime
Already A Member?
Discover Startups & Business Models

Unleash your potential by exploring unlimited articles, trackers, and playbooks. Identify the hottest startup deals, supercharge your innovation projects, and stay updated with expert curation.

Aadhaar Details Of Govt Workers In Jharkhand ‘Leaked’-Inc42 Media
How-To’s on Starting & Scaling Up

Empower yourself with comprehensive playbooks, expert analysis, and invaluable insights. Learn to validate ideas, acquire customers, secure funding, and navigate the journey to startup success.

Aadhaar Details Of Govt Workers In Jharkhand ‘Leaked’-Inc42 Media
Identify Trends & New Markets

Access 75+ in-depth reports on frontier industries. Gain exclusive market intelligence, understand market landscapes, and decode emerging trends to make informed decisions.

Aadhaar Details Of Govt Workers In Jharkhand ‘Leaked’-Inc42 Media
Track & Decode the Investment Landscape

Stay ahead with startup and funding trackers. Analyse investment strategies, profile successful investors, and keep track of upcoming funds, accelerators, and more.

Aadhaar Details Of Govt Workers In Jharkhand ‘Leaked’-Inc42 Media
Aadhaar Details Of Govt Workers In Jharkhand ‘Leaked’-Inc42 Media
You’re in Good company