A hacker group identifying itself as ScarletGroup has claimed to have breached the databases of the Rajasthan Police and offered sensitive official information for sale on the darknet. State cybersecurity units and central agencies have launched an inquiry to verify the claims, even as the police maintained that they have neither confirmed nor dismissed the alleged security incident. The development prompted immediate precautionary security measures across police formations in Rajasthan, while the official departmental website remained inaccessible.
Hackers Claim Access to Millions of Records and Sensitive Documents
In a post circulated on social media and darknet platforms, the hacking collective asserted that it had compromised 5,926 mailboxes and accessed 86.3 lakh emails. The group claimed its haul included more than 78.3 lakh unique email addresses, 70,301 identity records, and 59,460 mobile phone numbers purportedly connected to the state police department. The attackers also shared documents purported to be copies of first information reports, call detail records, electronic Know Your Customer entries, and witness statements. Furthermore, the group claimed to possess confidential material retrieved directly from the official email accounts of senior police officers.
Claims Extend to State Information Technology Department
The hackers further claimed to have accessed infrastructure belonging to Rajasthan’s Department of Information Technology and Communication. According to the group’s claims, the compromised information includes 1,065 mailboxes, 69 login credentials, 21 virtual private network logins, and 64 VPN certificates allegedly belonging to senior government officials. These claims have raised security concerns regarding the integrity of digital credentials, although technical teams have emphasized that the possession of specific documents does not verify a compromise of the underlying government servers or networks.
Multi-Agency Probe Underway as Precautionary Measures Enforced
Cyber Crime DIG Shantanu Kumar stated that multiple specialized teams have begun examining the claims. The Rajasthan Police Cyber Commando Team, the Incident Response Team, and the Cyber Security Operations Centre of the state IT department are actively investigating the situation. The matter has also been referred to the Indian Computer Emergency Response Team, while the Indian Cyber Crime Coordination Centre is assisting investigators in tracking the origin of the circulating material. DIG Kumar noted that while no technical vulnerability has been discovered so far, investigators are verifying whether the documents originated from a compromised police network or were obtained from private email accounts and social media platforms. A conclusive determination will be reached only after all three investigating teams submit their final technical assessments.
According to police sources, state cyber investigators and IT department officials initially reached out to the hacking group through Telegram to evaluate their claims and intentions. These preliminary discussions involved a possible payment ranging between 100 and 200 dollars, but no agreement was finalized. Meanwhile, police officers across the state have been instructed to immediately reset their official email passwords and apply software updates to their laptops and mobile phones. District-level officials have likewise been directed to strictly observe official cybersecurity protocols while the technical investigation continues.
Follow for daily updates on cybercrime, corporate fraud, DFIR, hacking, investigations, and digital forensics
