Telangana Government Site Flaw Exposed Sensitive Data of All Its Employees, Pensioners

guest · Dec 21, 2020

Telangana Government Site Flaw Exposed Sensitive Data of All Its Employees, Pensioners; Fixed Only After Three Months
A server misconfiguration was found on the Telangana government site
December 18, 2020
https://gadgets.ndtv.com/internet/n...k-breach-employees-pensioners-privacy-2340513

Telangana state government took over three months to protect sensitive details of its employees and pensioners from its website. The Indian Computer Emergency Response Team (CERT-In) confirmed the vulnerability and replied on email in September to say that the authorities had been intimated about the issue, and Telangana IT Secretary Jayesh Ranjan assured a fix.

In August, a server misconfiguration was found on the Telangana government site that risked exposing over 130,000 official files. Those files included thousands of government employee payslips, income tax details, and pension documents that had information including full names, addresses, bank account numbers along with IFSC codes, phone numbers, and salaries drawn, among other data.

The misconfiguration was discovered by a security researcher who goes by @_ars1an on Twitter.
Click to expand...

“The way the whole website is designed, I won't be surprised if the data is already dumped and ready to be downloaded from the dark Web,” the researcher told Gadgets 360.

Shortly after understanding the flaw, Gadgets 360 emailed the Telangana IT minister KT Rama Rao to inform about the exposure on August 28.
However, the IT team behind the Telangana government site initially just disabled the directories exposing files with confidential data and did not fix the exact flaw, according to the security researcher. It then took months to rectify the misconfiguration.
Click to expand...

Log in or Sign up

Telangana Government Site Flaw Exposed Sensitive Data of All Its Employees, Pensioners

guest Guest

Log in or Sign up

Telangana Government Site Flaw Exposed Sensitive Data of All Its Employees, Pensioners

guest Guest

Useful Searches