India's biggest data breach? Covid information of over 800 million people leaked

Data of more than 800 million Indians, includingAadhaar and passport details,has been put up forsale on the dark web after an alleged leak.

Resecurity, a US-based cybersecurity solutions and services provider was the first to report the massive breach.

It said in a blog post that its HUNTER (HUMINT) unit identified millions of personally identifiable information (PII) records belonging to Indian residents being "offered for sale on the Dark Web" in early October.

Add WION as a Preferred Source

A threat actor, who goes by the alias 'pwn0001' posted a thread on Oct 9, on Breach Forums providing access to 815 million "Indian Citizen Aadhaar & Passport" records.

The report said that when investigators tried to contact the threat actor, they learned that they were willing to "sell the entire Aadhaar and Indian passport dataset for $80,000".

All the leaked information can reportedly be traced to the personal data of peoplecollected by the Indian Council of Medical Research (ICMR) during the COVID-19 pandemic.

However,there's no official confirmation yet on the source.

Image sourceResecurity.

Watch:Enforcement directorate summons Kejriwal for questioning on Nov7

The threat actor, pwn0001, shared spreadsheets containing four large leak samples with fragments of Aadhaar data as proof.

One of the leaked samples contains 100,000 records of PII related to Indian residents.The information was also shared and circulated on social media forum X.

As perlocal media reports, Health Ministry officialssaid that the Indian Computer Emergency Response Team (Cert – In) has also been alerted by the ICMR.

"Verification process of the breach reports are ongoing," a Health Ministry official said as quoted.

(With inputs from agencies)

WATCH WION LIVE HERE

You can now write for wionews.com and be a part of the community. Share your stories and opinions with us here.