Yet another security vulnerability afflicts India’s citizen database

India’s Aadhaar database is a national system that contains personal data and biometric information on over 1.1 billion Indian citizens. While joining is technically voluntary (for now, at least), enrollment has become necessary for things like opening bank accounts and applying for loans, filing tax returns and buying or selling property. But Aadhaar has been rife with security issues and ZDNet reports that another, currently unaddressed, problem is exposing Indian citizens’ information.

ZDNet is withholding details about the security lapse because it says Indian officials haven’t done anything about it. Karan Saini, a New Delhi-based security researcher, spotted the vulnerability and says a data leak in a state-owned utility company’s system is letting anyone retrieve information on any Aadhaar member. Names, Aadhaar identity numbers and bank information are all exposed.

ZDNet spent over a month trying to get in touch with Indian authorities and after receiving no replies, it contacted the Indian Consulate in New York. ZDNet spent two weeks describing the problem, but it remained unaddressed. It said the vulnerability was still accessible at the time of publication.

Aadhaar has experienced a number of other security issues in the past. Earlier this year, reporters at Indian publication The Tribune were able to buy an Aadhaar administrator ID and password from an individual through WhatsApp. It cost less than $ 8, took 20 minutes and they were able to enter any Aadhaar ID number and access that person’s name, address, photo, phone number and email.

Aadhaar has attracted a lot of criticism for the repeated security lapses it has suffered over the years and the country’s Supreme Court is currently assessing Aadhaar’s constitutional validity.

Source: ZDNet

Post Author: martin

Martin is an enthusiastic programmer, a webdeveloper and a young entrepreneur. He is intereted into computers for a long time. In the age of 10 he has programmed his first website and since then he has been working on web technologies until now. He is the Founder and Editor-in-Chief of and Online Magazines. His colleagues appreciate him as a passionate workhorse, a fan of new technologies, an eternal optimist and a dreamer, but especially the soul of the team for whom he can do anything in the world.

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.