March 20, 2022
1 min read

Data of 2.46 lakh CISF personnel exposed online

Several of those logs contained personnel files, health records and personally identifiable information on CISF officers…reports Asian Lite News

A new report on Saturday claimed that personal files and health records of at least 2.46 lakh personnel from the Central Industrial Security Force (CISF) have allegedly been exposed online owing to a data security lapse.

A TechCrunch report cited an unnamed security researcher in India as saying that the researcher found a database packed with network logs generated by a security appliance connected to CISF’s network.

“But the database was not secured with a password, allowing anyone on the internet to access the logs from their web browser,” the report alleged.

The logs allegedly contained records for more than 246,000 full web addresses of PDF documents on CISF’s network.

Several of those logs contained personnel files, health records and personally identifiable information on CISF officers.

Some of the files are dated as recently as 2022, according to the report.

The researcher said the security appliance is built by India-based security company Haltdos.

The company, however, did not comment on the report.

In January, reports surfaced that Covid-19 data of over 20,000 Indians, including health workers, in PDF files were available on the Raid Forums website on the Dark Web, and the hacker claims that they were directly coming from a government CDN (content delivery network) server.

The same documents were available freely on Google Search as “List of Beneficiaries Enrolled for Covid Vaccine” with keywords like RT-PCR results.

COWIN APP

The Ministry of Health and Family Welfare later brushed off the reports, saying “no data has leaked from the CoWIN portal and the entire data of residents is safe and secure on this digital platform”.

The Ministry had emphasised that the vaccination platform “collects neither the address of the person nor the RT-PCR test results for Covid-19 vaccination”.

Last year, the Health Ministry and security researchers had denied the breach of Covid-19 vaccination data of 150 million Indians, after news of the hack spread online.

The data leak allegedly happened on the CoWin portal, which is used for vaccination.

ALSO READ-Strategic Zojila pass on Srinagar-Kargil-Leh road opened

Previous Story

Sharad Yadav all set to merge LJD with RJD

Next Story

‘India may soon top hate and anger charts’

Latest from Defence

Quantum Leap Secures India’s Edge

The Minister said India has entered a new quantum era, set to transform future warfare….reports Asian Lite News India has taken a major leap in defence and cyber security by successfully demonstrating

MI6 Gets First Female Chief

Metreweli, 47, will become the first woman to lead MI6 in its 116-year history….reports Asian Lite News Underscoring the rising role of cyber intelligence in modern espionage, Prime Minister Keir Starmer has

Chinese Arms: All Show, No Go?

Mounting evidence indicates that systemic corruption and persistent quality issues within China’s defence industry are eroding the reliability and global credibility of its military exports…writes Rishan Sen For over a decade, China

UN renews Libya arms ship checks

Thirteen Council members voted in favour of the resolution, while Russia and China abstained. The United Nations Security Council has voted to extend the authorisation allowing member states to inspect vessels suspected
Go toTop