Aligarh: A cyber fraud involving the alleged hacking and manipulation of the Mining Department’s online portal has resulted in an estimated revenue loss of more than ₹62.21 lakh in just 13 days. The unidentified hacker allegedly misused the login credentials of the District Mining Officer to alter the government-approved rate for minor minerals and generate electronic transit forms at the reduced rate. Following the discovery of the irregularities, a case has been registered at the Cyber Crime Police Station, and a detailed investigation is underway.
According to departmental information, the alleged manipulation took place between September 18 and October 1. The prescribed rate for minor minerals on the portal was ₹4.19 per cubic metre. However, the rate was allegedly reduced to ₹3 per cubic metre by accessing the officer’s login ID. After changing the rate, the person responsible reportedly used the same credentials to generate E-MM-11 forms covering 40,125 cubic metres of minor minerals.
FCRF Launches CP-FRM to Build India’s Next Generation of Fraud Risk Professionals
The department has assessed the resulting revenue loss at ₹62,21,300. Investigators are examining how the rate was changed, how the electronic forms were generated and whether the portal’s security controls were bypassed or misused. The suspected manipulation of an official account has also raised questions about the safeguards protecting the department’s digital systems.
Audit Uncovers Irregularities
The alleged fraud came to light on October 5 during a departmental audit. District Mining Officer Surendra Singh said the irregularities were detected while officials were reviewing the portal’s records and transactions.
Under the prescribed login procedure, a security one-time password (OTP) is required to be sent to the officer’s official closed user group (CUG) mobile number. However, during the login process, officials noticed that the OTP appeared to be getting filled in automatically. This unusual development raised suspicions about the security of the account and prompted officials to examine the login history.
The subsequent review reportedly revealed discrepancies linked to the changes in mineral rates and the generation of electronic forms. Officials began examining the transactions to establish how the account had been accessed and whether the credentials had been compromised.
After the irregularities were detected, the department took immediate action to restrict further access. The relevant licence-holder’s ID was blocked at around 8 pm on the night of October 5. The move was intended to prevent any further suspected misuse while the department and police began examining the incident.
Police Register Case Against Unknown Hacker
The Cyber Crime Police Station registered a first information report against an unidentified hacker on the basis of a complaint submitted by the Mining Department. Circle Officer Sarvam Singh confirmed that the case had been registered and that police had initiated a detailed investigation.
Investigators are also examining other suspicious entries recorded on the portal to determine whether the incident was limited to the transactions already identified or whether additional irregularities may have occurred. The inquiry is expected to focus on the login history, changes made to the official mineral rates, the electronic forms generated during the period and the circumstances surrounding the automatic filling of the OTP.
The police will also seek to establish who accessed the account, whether the login credentials were obtained without authorisation and whether any other person or account was involved. The department’s assessment of the financial loss and the records supporting the altered transactions are likely to form part of the investigation.
The incident highlights the potential financial consequences of unauthorised access to government digital platforms, particularly when official login credentials can be used to change rates or generate regulatory documents. However, the identity of the person responsible, the method allegedly used to access the portal and the full extent of the suspected manipulation remain to be established through the investigation.
Police have not identified a suspect so far. Further details are expected to emerge as investigators analyse the portal’s digital records and examine the suspicious transactions. The allegations have yet to be proved in court.
About the author — Suvedita Nath is a science student with a growing interest in cybercrime and digital safety. She writes on online activity, cyber threats, and technology-driven risks. Her work focuses on clarity, accuracy, and public awareness.
Follow for daily updates on cybercrime, corporate fraud, DFIR, hacking, investigations, and digital forensics
