Serious questions have been raised over the safety of digital governance systems in Davangere after cyber fraudsters allegedly hacked the e-Swathu property management platform of the Davangere Municipal Corporation and facilitated the illegal approval of five property records. The cyber intrusion reportedly remained undetected for nearly six months and came to light only during an internal review that flagged suspicious and unauthorised entries in the digital system.
Final Call: FCRF Opens Last Registration Window for GRC and DPO Certifications
e-Swathu Hack Exposed: Illegal Approvals via Stolen Credentials
According to preliminary investigations, the fraudsters gained access to the e-Swathu software by misusing the login IDs and passwords of municipal officials. Using these compromised credentials, they bypassed established procedures to create and approve digital property records. Officials said the approvals were processed in a manner that allowed them to evade routine scrutiny and monitoring mechanisms in the initial stages.
Discovery Through Internal Audit
The breach was conclusively established after civic authorities initiated a detailed examination of property approvals issued through the e-Swathu system. During this exercise, significant discrepancies were found in certain records, triggering a deeper probe. Subsequent verification confirmed that the approvals had been granted without physical inspection, mandatory administrative checks, or authorisation from competent authorities, pointing to unauthorised access to the system.
Alarming Six-Month Delay in Detection
What has further alarmed officials is the fact that the cyber intrusion went unnoticed for almost six months. This has raised serious concerns about the robustness of the IT security framework protecting sensitive municipal databases. The e-Swathu platform serves as a critical digital backbone for urban local bodies in Karnataka, maintaining records related to property ownership, assessments and tax details. Any manipulation of such data, officials warned, could result in legal disputes, ownership conflicts and potential revenue losses.
Police Complaint and Investigation Launched
Following the exposure of the breach, K. Nagaraj, Commissioner of Zone Office-1 of the Davangere Municipal Corporation, filed a formal complaint at the CEN Police Station. The complaint seeks a thorough investigation into how the system was hacked, which officials’ credentials were misused, and whether the incident involved internal negligence or collusion at any level.
Police officials confirmed that a case has been registered under relevant provisions relating to cybercrime and unauthorised access to computer systems, and an investigation has been initiated. Investigators are examining server logs, IP address access details and user activity records to reconstruct the sequence of events and identify those responsible for the breach.
Comprehensive Audit Underway
Officials also disclosed that e-Swathu operations within Davangere city limits are handled through three zonal offices, each responsible for property records in its jurisdiction. In the wake of the incident, the municipal corporation has decided to carry out a comprehensive audit of all property approvals processed through the system over the past several months to rule out the possibility of further irregularities.
Senior civic officials said the audit will focus on identifying patterns of suspicious approvals, unusual timing of record generation and deviations from standard verification protocols. “The objective is to ensure that no other illegal entries remain in the system and to restore public confidence in digital governance,” an official said.
Call for Stronger Cybersecurity Measures
The incident has once again underlined the urgent need for stronger cybersecurity measures in municipal bodies. Experts noted that while digital governance has enhanced efficiency and transparency, weak password practices, limited monitoring and lax access controls have made such platforms increasingly vulnerable to cyberattacks.
Police sources said the probe will also examine whether the illegally approved properties were later sold, transferred or used for financial transactions, which could significantly widen the scope of the case. Any financial gains traced to manipulation of records may invite additional charges.
Immediate Corrective Actions
For now, the municipal corporation has assured residents that corrective steps are being implemented. These include resetting compromised credentials, tightening access protocols and sensitising staff to cybersecurity risks. Officials said further action would be guided by the findings of the police investigation and the ongoing audit.
As the inquiry progresses, the Davangere case stands as a stark reminder of the vulnerabilities in digital public infrastructure and the need for constant vigilance to safeguard systems that form the backbone of urban administration.
About the author – Ayesha Aayat is a law student and contributor covering cybercrime, online frauds, and digital safety concerns. Her writing aims to raise awareness about evolving cyber threats and legal responses.
