A suspected cyberattack on a gram panchayat’s birth and death registration ID in Amroha district has led to the unauthorised issuance of 498 birth certificates across several states within two days. The certificates were allegedly generated on October 6 and 7 without applications being submitted to the panchayat, prompting authorities to block the registration ID and initiate an investigation.
FCRF Launches CP-FRM to Build India’s Next Generation of Fraud Risk Professionals
How Was the Fraud Detected?
The suspected breach involved the birth and death registration ID assigned to the Tofapur gram panchayat in the Joya block of Amroha district.
The irregularities came to light after Panchayat Secretary Amarjeet Singh checked the registration system and discovered that hundreds of birth certificates had been issued without authorisation.
Singh informed the health department about the suspicious activity. Chief Medical Officer Dr Ramakant Sagar subsequently blocked the registration ID to prevent further misuse.
The health department has also initiated steps to cancel the certificates allegedly generated through the compromised account.
Where Were the Certificates Issued?
Of the 498 birth certificates, 270 were issued in the names of individuals from different districts of Uttar Pradesh.
The remaining certificates were issued across several other states, indicating that the suspected misuse extended beyond Amroha.
According to the available records, 73 certificates were issued in Bihar, 56 in Jharkhand, 16 in Haryana, 15 each in West Bengal and Karnataka, 12 in Maharashtra and nine in Madhya Pradesh.
Eight certificates were issued in Assam, seven in Punjab, six in Himachal Pradesh, four in Delhi, three in Telangana, two each in Rajasthan and Uttarakhand, and one each in Sikkim, Chandigarh and Andhra Pradesh.
Six certificates were issued in locations not specified in the available records.
The geographical spread has raised concerns about the extent of the suspected misuse of the panchayat’s registration credentials.
How Was the Registration ID Misused?
Panchayat Secretary Amarjeet Singh said the registration ID had remained inactive for approximately a week before the irregularities were discovered.
After he contacted the Chief Medical Officer’s office, the ID was reactivated on October 12.
The unauthorised certificates were subsequently detected, revealing that entries had allegedly been made on October 6 and 7.
The investigation is examining how the registration ID was accessed and used without permission.
Authorities have not identified the individuals responsible for the suspected hacking.
Singh said he had filed a complaint against unidentified persons over the alleged compromise of the registration ID.
What Action Have Authorities Taken?
Chief Medical Officer Dr Ramakant Sagar has written to the Director General of Medical and Health Services, seeking cancellation of the allegedly fraudulent birth certificates.
The district administration has also initiated an investigation into the incident.
The District Magistrate has assigned the inquiry to the Chief Development Officer, while the cyber cell is separately examining the suspected breach.
Officials are seeking to establish how the registration credentials were compromised and how certificates were generated without the required applications.
The investigation is also expected to examine whether the registration system was accessed by unauthorised individuals.
Who Is Responsible for Birth Registration?
In rural areas, the District Panchayat Raj Officer serves as the sub-registrar for birth certificates.
In urban areas, the Chief Medical Officer is responsible for the registration process.
The Chief Medical Officer has forwarded a list containing the names of individuals who obtained the allegedly fraudulent certificates to the Chief Registrar.
The list has been submitted for necessary action, including cancellation of the certificates.
Authorities are continuing to examine the records associated with the suspicious registrations.
What Happens Next?
The administrative and cyber investigations are continuing to determine the circumstances surrounding the suspected hacking.
Officials are examining the unauthorised entries, the compromised registration ID and the certificates issued during the two-day period.
The authorities are also pursuing the cancellation of the certificates identified as allegedly fraudulent.
The identities of those responsible and the method used to access the registration system have not yet been established.
The Amroha incident highlights the potential consequences of unauthorised access to government registration systems. A single panchayat registration ID was allegedly used to generate hundreds of birth certificates for individuals across multiple states without applications being submitted locally. The investigation will be crucial in determining how the credentials were compromised and whether additional safeguards are needed to prevent similar misuse of official records.
Follow for daily updates on cybercrime, corporate fraud, DFIR, hacking, investigations, and digital forensics
