An Indian state government has fixed security bugs on their website that leaked the PII of millions of it’s residents, after being identified by a researcher and reported by TechCrunch.
Jan Aadhar, the web portal that exposes private information, is aimed at assigning a unique identifier to each family and individual in the state of Rajasthan and providing them with welfare schemes accordingly. The state government has silently secured these bugs and are yet to make an official announcement of this incident.
Rajasthan’s Jan Aadhar Data Leak
One of the states of India, Rajasthan, has silently fixed bugs on it’s government portal that leaked the PII of millions of it’s residents until a security researcher spotted it and reported the matter. As noted by TechCrunch,
In December last year, Viktor Markopoulos from CloudDefense.ai, a cloud security company, had reportedly found several bugs in Rajasthan’s Jan Aadhaar portal – which is meant for assigning a unique identifier to the local families and individuals and offer welfare schemes accordingly.
Reaching TechCrunch, Markopoulos has reportedly sought help from the publication to disclose bugs to the authorities. TechCrunch noted that they had informed the Rajasthan government and also had followed up for a response but didn’t receive any.
Upon informing CERT-In, the agency confirmed on Thursday that the bugs had been fixed. The same has been confirmed by the security researcher, too, this week. When exposed, Markopoulo said the Jan Aadhar portal leaked copies of Aadhaar cards, birth and marriage certificates, registrants’ electricity bills and income statements and their personal information like date of birth, gender and father’s name.
While one bug allowed anyone to access the personal documents and information of anyone with just their phone number, another bug returned the sensitive data due to the server’s improper validation of OTPs, the researcher explained.
Other Trending News:- News
