Indian Aadhaar data available for 500 Rs

deBoetie · Jan 4, 2018

The Tribune India paper is reporting that its investigators were able to access personal information of the 1bn people scanned so far as part of the Aadhaar program (the Indian national ID scheme), via WhatsApp, for 500Rs (around $8.0) This personal information includes name, address, postal code (PIN), photo, phone number and email. For an additional fee, you can buy software that allows you to print a fake ID card.

http://www.tribuneindia.com/news/na...access-to-billion-aadhaar-details/523361.html

The authorities claim that no biometric data (thumbprint and retina scans) was compromised. “Mere display of demographic information cannot be misused without biometrics,” it said in a statement.

https://www.theguardian.com/world/2...l-id-database-data-leak-bought-online-aadhaar

mirimir · Jan 9, 2018

Damn, now who would have expected that?

deBoetie · Jan 9, 2018

mirimir said: ↑

Damn, now who would have expected that?
Click to expand...

Yeh, reminded me of our Beloved Leaders in the UK assuring everyone how safe the proposed ID cards + National Identity Register Database were going to be. It was only an accident of politics that prevented that from being implemented, not the well-informed horror of pretty much anyone who knew anything about security, networking, databases, software & the certainty of SNAFU - they completely ignored the consultation telling them what a spectacularly bad and dangerous idea it was. But then, experts are unnecessary in an era of ideology & fake news.

Minimalist · Jan 14, 2018

Aadhaar biometric lock, a lesser-known security feature
Long before it brought in an extra firewall for privacy with the proposed virtual IDs, the Aadhaar-issuing authority UIDAI had set in place a 'biometric lock' as an additional layer of protection against outside intrusions or breach.

A lesser-known feature, the biometric lock in existing Aadhaar system is aimed at allowing users to safeguard or lock down their biometrics as and when they want.
Click to expand...

https://economictimes.indiatimes.co...own-security-feature/articleshow/62497922.cms

Minimalist · Jan 22, 2018

Edward Snowden Is Campaigning Against the World’s Largest Biometric ID Program

American whistleblower and former Central Intelligence Agency employee Edward Snowden has joined the campaign against Aadhaar, India’s 12-digit unique identification number program that has been under fire for its security and privacy systems.

On Sunday, Jan. 21, Snowden backed KC Verma, former head of India’s external intelligence agency, the Research and Analysis Wing (RAW), who had written about his experiences with Aadhaar. Snowden retweeted the article published in The Wire saying the act of organizations such as banks and telcos forcing individuals to produce their Aadhaar numbers should be “criminalized.”
Click to expand...

http://www.nextgov.com/analytics-da...t-worlds-largest-biometric-id-program/145375/

deBoetie · Jan 23, 2018

Minimalist said: ↑

http://www.nextgov.com/analytics-da...t-worlds-largest-biometric-id-program/145375/
Click to expand...

Good report - the day my bank attempts to foist a biometric-backed Id on me is the day they lose my custom. I'm expecting it though.

Minimalist · Mar 18, 2018

Who is ‘Elliot Alderson’ – the vigilante hacker taking down UIDAI, one tweet at a time?

Acting on an anonymous tip, Alderson chose to look into just how watertight the security of mAadhaar, the Aadhaar Android application is. Alderson went on to find a host of issues with the mAadhaar application, the mobile security practices of the Unique Identification Authority of India, and most importantly, how third party websites are using Aadhaar data. Soon enough, the UIDAI sat up and took notice albeit with a combative stance.
Click to expand...

https://scroll.in/magazine/872352/w...-hacker-taking-down-uidai-one-tweet-at-a-time

Minimalist · Mar 23, 2018

A new data leak hits Aadhaar, India's national ID database

Karan Saini, a New Delhi-based security researcher who found the vulnerable endpoint, said that anyone with an Aadhaar number is affected.

Yet the Indian authorities have done nothing to fix the flaw. ZDNet spent more than a month trying to contact the Indian authorities, but nobody responded to our repeated emails.
Click to expand...

http://www.zdnet.com/article/another-data-leak-hits-india-aadhaar-biometric-database/

Minimalist · Mar 24, 2018

Indian agency denies reported security lapse in ID card project

ZDNet reported that a data leak on a system run by a state-owned utility company, which it did not name, could allow access to private information of holders of the biometric “Aadhaar” ID cards, exposing their names, their unique 12-digit identity numbers, and their bank details.

But the Unique Identification Authority of India (UIDAI), which runs the Aadhaar program, said “there is no truth in this story” and that they were “contemplating legal action against ZDNet”.
Click to expand...

https://uk.reuters.com/article/us-i...curity-lapse-in-id-card-project-idUKKBN1H00IR

Minimalist · Mar 25, 2018

Narendra Modi app sharing user information without consent: Security researcher

French security researcher Elliot Alderson, who's been in the news for discovering major security flaws in the Aadhaar app, has found out that the official Narendra Modi app on Android is allegedly sharing user information with a US-based company called CleverTap without their consent.

The information being shared includes operating software, network type, carrier, e-mail, photo, gender, and name, he said.
Click to expand...

https://www.newsbytesapp.com/timeli...ity-flaws-discovered-in-the-narendra-modi-app

guest · Sep 11, 2018

Simple Hack Turns India's Massive Biometric Database Into a Profitable Counterfeit System
September 11, 2018
https://gizmodo.com/simple-hack-turns-indias-massive-biometric-database-int-1828972521

India’s controversial biometric database, Aadhaar, has been once again compromised, according to a three-month investigation launched by HuffPost India.

In a report published Tuesday, HuffPost revealed the existence of a malicious patch said to disable critical security features, making it easier not only to create unauthorized Aadhaar numbers but to fool the system’s biometric recognition systems from virtually anywhere in the world.

The purpose of the patch [...] is not to grant access to information in the database; rather, it allows unauthorized users to introduce information to it—i.e., create identities, potentially with fraudulent biometric data.

HuffPost India reports having acquired access to a patch that essentially reverts portions of the Aadhaar code using previous, less secure versions of the software. [...] Installing the patch, which is apparently widely in use at enrollment centers, is said to be relatively simple.
Click to expand...

Minimalist · Oct 27, 2018

Aadhaar data breach report: Digital security firm Gemalto issues public apology

Digital security firm Gemalto on Saturday issued a public apology in national newspapers for its report which claimed a breach in the Aadhaar database.

The company withdrew its report which claimed that data breach incidences in India were the second highest globally in the first half of 2018 on account of a compromise in the Aadhaar database.
Click to expand...

https://www.thehindubusinessline.co...lto-issues-public-apology/article25347670.ece

guest · Feb 1, 2019

Indian state government leaks thousands of Aadhaar numbers
Another security lapse involving India's national identity system
January 31, 2019
https://techcrunch.com/2019/01/31/aadhaar-data-leak/

One of the web systems used to record attendance of government workers for the Indian state of Jharkhand was left exposed and without a password as far back as 2014, allowing anyone access to names, job titles, and partial phone numbers on 166,000 workers as of the time of writing.

The data leak isn’t a direct breach of the central database run by Aadhaar’s regulator, the Unique Identification Authority of India (UIDAI), but represents another lapse in responsibility from the authority charged with protecting its data.
The site was easily found on a subdomain of the state government’s website, but for long enough that it was indexed by Google, which cached copies of not only the site itself, but also its attendance record pages that still contain Aadhaar numbers in each worker’s photo.

The leak of Aadhaar numbers may not be seen as sensitive compared to leaked biometric data.
But it’s raises fears that obtaining and misusing someone’s number could lead to identity theft and fraud — which reportedly peaked last year.
Click to expand...

guest · Feb 14, 2019

Aadhaar data breach report incorrect: Delhi High Court told
The bench was hearing a plea seeking exemplary damages for the losses caused due to leakage of Aadhaar data
February 14, 2019
http://www.newindianexpress.com/nat...-incorrect-delhi-high-court-told-1938789.html

The Unique Identification Authority of India (UIDAI) on Thursday told the Delhi High Court that reports regarding security breach of data related to Aadhaar is incorrect and misleading as the strongest encryption technology has been used to store data which is impossible to decrypt.

The plea was filed by Shamnad Basheer alleging that the dissemination of personal information of Aadhaar holders made it clear that the government is responsible for any breach of right to informational privacy.

It further added that there are multiple layers of security at physical level in UIDAI data centres and is being managed by armed Central Industrial Security Force (CISF) personnel round-the-clock.
"UIDAI has taken all necessary safeguards, starting from providing standardised software that encrypts the entire data even before saving it to any disk; protecting data using tamper-proofing; identifying every operator in all and every enrolment; [...]"
Click to expand...

guest · Feb 19, 2019

India’s state gas company leaks millions of Aadhaar numbers
February 18, 2019
https://techcrunch.com/2019/02/18/aadhaar-indane-leak/

Another security lapse has exposed millions of Aadhaar numbers.
This time, India’s state-owned gas company Indane left exposed a part of its website for dealers and distributors, even though it’s only supposed to be accessible with a valid username and password. But the part of the site was indexed in Google, allowing anyone to bypass the login page altogether and gain unfettered access to the dealer database.

The data was found by a security researcher who asked to remain anonymous for fear of retribution from the Indian authorities.
Using a custom-built script to scrape the database, he found customer data for 11,000 dealers, including names and addresses of customers, as well as the customers’ confidential Aadhaar number hidden in the link of each record.

Robert, who explained more about his findings in a blog post, found 5.8 million Indane customer records before his script was blocked. In all, Robert estimated the total number affected could surpass 6.7 million customers.
Click to expand...

guest · Apr 15, 2019

78 million records of Aadhaar data
IT Grids Aadhaar data theft case may be the biggest ever in India: Experts
April 15, 2019
https://timesofindia.indiatimes.com/articleshow/68880147.cms

[...] the magnitude of the case is huge according to data security researchers.
The case pertaining to the Sevamitra app designed by the company for the Telugu Desam Party (TDP) alleges that the app contained the Aadhaar data of 7.8 crore citizens.
The special investigation team (SIT) on the case suspects that the accused had accessed the data from the UIDAI’s Central Identified Data Repository or the State Resident Data Hub (SRDH).

In the IT Grids case, it is alleged that the Aadhaar data of two states have been misused. There have been instances of Aadhaar detail leak of 4.5 crore citizens of AP…” data security researcher Srinivas Kodali told TOI.
Click to expand...

Telangana SIT to probe case related to 'unauthorised storage' of Aadhaar details
April 15, 2019
https://www.moneycontrol.com/news/i...rised-storage-of-aadhaar-details-3830511.html

The city police had earlier registered a case against IT Grids India for illegally using and storing information of crores of voters of Andhra Pradesh through "Seva Mitra" mobile application allegedly used by the ruling TDP in AP.

The TSFSL in its preliminary report has stated the seized hard disks contained a database of a large number of records pertaining to Aadhaar number in a particular structural database.
Based on the TSFSL report, UIDAI filed a complaint with police on Friday.

Upon further examination of the digital evidence, it was found that 7,82,21,397 records of Aadhaar data belonging to people of Telangana and Andhra Pradesh were used by IT Grids India for "Seva Mitra" application of the TDP, the UIDAI said in its complaint.

"Storing Aadhaar data is a crime. Some mobile companies are also given permission to use Aadhaar data for verification. But they cannot store data and they cannot deviate from the assigned purpose," the official said.
Click to expand...

guest · Apr 24, 2019

mood said: ↑

78 million records of Aadhaar data
IT Grids Aadhaar data theft case may be the biggest ever in India: Experts
April 15, 2019
https://timesofindia.indiatimes.com/articleshow/68880147.cms
Click to expand...

20 million records of Aadhaar data found
Aadhar Data of More Than 2 Crore Punjab Residents Found on Hard Disks
April 24, 2019
http://www.ehackingnews.com/2019/04/aadhar-data-of-more-than-2-crore-punjab.html

The ongoing investigation by The Special Investigation Team (SIT) on the Aadhaar data theft of around 7.82 crore people residing in Telangana and Andra Pradesh has led to the discovery of a hard disk containing the Aadhaar data of 2 crore Punjab residents, as per The Tribune reporting.

With the further discovery of 2 crore Aadhaar data records, the breach which initially estimated around 7.8 crores, went up to 9.8 crores. The investigating agency is looking into the obvious question which arises— why would a Hyderabad based IT company want to store Aadhaar data of Punjab residents?

Defending their stand, “Mere possession and storage of Aadhaar numbers of people, though it maybe an offense under the Aadhaar Act under some circumstances, does not put the Aadhaar holders under any harm in any manner whatsoever. For accessing any Aadhaar-based service, biometrics or one-time password (OTP) is also needed,” the UIDAI said.
Click to expand...

guest · Jan 1, 2020

Man endures ‘living hell’ as Aadhaar card is put online
December 31, 2019
https://mumbaimirror.indiatimes.com...r-card-is-put-online/articleshow/73038561.cms

Ameya Dhapre, a 34-year-old computer engineer from Girgaon, has had his life turned upside-down ever since someone posted a copy of his Aadhaar card on the web. His case highlights how easy it is to impersonate someone with just a copy of their Aadhaar card, and how important it is to guard it just as one would a credit card or a bank account number.

He said, “I approached UIDAI but they have no way of changing someone’s Aadhaar number. They said I should de-activate my account but that is not a solution. They wanted me to lodge a complaint for every single fraudulent transaction. That is an impossible task. They need to have a better solution to my problem as I am suffering for no fault of my own.”
He also requested them to get the copies of his Aadhaar card removed from the web.

He told Mirror, “My life has become hell. I receive at least two or three authentication-failure emails a day, apart from several anonymous calls and messages, which indicate that people are trying to use my Aadhaar somewhere [...]”
He added, “Whenever I inquire with the police, their only response is: ‘We are investigating’. There is no relief in sight. Even the cyber crime cell hasn’t been able to help erase my details online.”
Click to expand...

Log in or Sign up

Indian Aadhaar data available for 500 Rs

deBoetie Registered Member

mirimir Registered Member

deBoetie Registered Member

Minimalist Registered Member

Minimalist Registered Member

deBoetie Registered Member

Minimalist Registered Member

Minimalist Registered Member

Minimalist Registered Member

Minimalist Registered Member

guest Guest

Minimalist Registered Member

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

Log in or Sign up

Indian Aadhaar data available for 500 Rs

deBoetie Registered Member

mirimir Registered Member

deBoetie Registered Member

Minimalist Registered Member

Minimalist Registered Member

deBoetie Registered Member

Minimalist Registered Member

Minimalist Registered Member

Minimalist Registered Member

Minimalist Registered Member

guest Guest

Minimalist Registered Member

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

Useful Searches