Home / / India's national identity database hacked

India's national identity database hacked

Aadhaar breach puts personal data of over one billion Indian citizens on sale for less than $8

India's national identity database hacked
India's Aadhaar biometric ID system appears to have been compromised.

India's central biometric database, which holds data of more than one billion citizens, has apparently been breached by hackers.

According to an investigation by India's Tribune newspaper, the Aadhaar biometric database has been compromised, with hackers installing a gateway into the database and selling access to personal identity data for as little as 500 rupees ($7.89). Journalists for the Tribune were able to buy personal data via WhatsApp.

The Unique Identification Authority of India (UIDAI), which is responsible for Aadhaar, has denied that sensitive data has been hacked, but the Tribune investigation by was able to purchase users data.

The illicit portal into the database enables a user to enter the unique Aadhaar user ID, and access addresses, post codes, photos, phone numbers, and email addresses. For a 300 rupee ($4.70) fee, hackers will also provide software to allow a victim's Aadhaar card to be printed.

A follow-up report by Indian news website The Quint, has suggested that Aadhaar has a security flaw, which allows anyone with administrator access to the database to also grant administrator privileges to any other person, a process which can be repeated over and over. This would give those newly appointed with administration privileges access to the identifying data including names, addresses, dates of birth, parents' names, gender, mobile numbers, language, but not the biometric data.

Aadhaar holds biometric data including fingerprints and iris scans. The UIDAI said that the biometric information and other sensitive data has not been compromised, but that it has filed a police complaint.

Follow us to get the most comprehensive technology news in UAE delivered fresh from our social media accounts on Facebook, Twitter, Youtube, and listen to our Weekly Podcast. Click here to sign up for our weekly newsletter on curated technology news in the Middle East and Worldwide.

REGISTER NOW | Webinar Event | Security you can bank on – Safeguarding the Middle East’s financial sector

Presented in partnership with security and network specialist Cybereason, the second in the three part webinar series will bring together a panel of experts to discuss how banks and financial institutions are evolving their service offering while simultaneously staying one step ahead of the cyber criminals who seek to bring their operations crashing to the ground.

CHANNEL AWARD 2018