Covid-19 Data Of Thousands Of Indians Leaked Online, Available For Purchase: Cyber Expert

NEW DELHI: Personal information of thousands of people in India has leaked from a government server, including their name, mobile number, address, and Covid test results. The leaked data has been made available for purchase on the Raid Forums website, where cybercriminals claim to have personal information on over 20,000 people, PTI said in its report. This information is also searchable online.

The information posted on Raid Forums includes these people’s names, ages, genders, phone numbers, addresses, dates, and the results of their Covid-19 reports. Rajshekhar Rajaharia, a cyber security researcher, also tweeted that personally identifiable information (PII) such as names and Covid-19 results are made public via a content delivery network (CDN).

He claimed that Google had indexed tens of thousands of files from the affected system.

An email sent by PTI to the Ministry of Electronics and IT received no response. Rajshekhar in the past has flagged several data leaks and breaches which were acknowledged and fixed by many companies.

According to the sample document shared on Raid Forums, the leaked data was intended for upload to the Co-WIN portal.

In terms of controlling and raising awareness about the Covid-19 pandemic, as well as its vaccination programme, the government has relied heavily on digital technologies. For Covid-19-related services and information, several government departments require people to use the Aarogya Setu app.

In a follow-up tweet on January 20, Rajaharia stated that he is not reporting any vulnerability in this incident, but instead warns people to be on the lookout for fraud calls, offers related to Covid-19, and so on, as their data is being sold on the dark web.

Follow The420.in on

 Telegram | Facebook | Twitter | LinkedIn | Instagram | YouTube