The threat actors selling the data allegedly obtained the data through ‘vulnerabilities in government databases or telecommunication systems’, said CloudSek.
The Indian Computer Emergency Response Team (CERT-In), under India's Ministry of Electronics and Information Technology (MeitY), has recently issued a high-risk alert for users of Apple and Samsung products, flagging multiple vulnerabilities that could pose a significant threat to data and device security - as per the Indian news media The Indian Express.
Personal Data Protection Bill 2023 awaits President Droupadi Murmu signature; Centre hopes to bolster cybersecurity measures safeguard personal data; latest news on news18.com; Bhaswati Guha Majumder
India s digital public infrastructure has been shaken by claims that the vaccination database, CoWIN, has been hacked. While officials have dismissed the reports as "mischievous," they may serve as a hindrance to India s efforts to create a "third way" for technology governance by creating a system for cross-border trading in digital services and promotion in digital diplomacy. To fix its shortcomings, India needs to establish a proper data-protection law and a transparent process for digital public infrastructure development and maintenance, enhanced security and privacy, and cross-regulation harmonization.