'Old Data': IT Ministry On Alleged Breach Of CoWIN Data On Telegram, Seeks Report

According to media reports, the bot has been allegedly giving away details like date of birth, phone number, Aadhar details, PAN number, and even passport details, among others and the same can be accessed by anyone.?

Outlook Web Desk

Updated on: 12 June 2023 10:25 am

Data breach

After reports emerged that?data and personal information of citizens who registered on the CoWIN app for Covid-19 vaccination, are allegedly now available freely on Telegram app, the Indian Government's Ministry of Electronics and Information Technology official has said that it is 'old data'.

“It is old data, we are still verifying it; we have sought a report regarding the same", a?person familiar with the development in Ministry of Electronics and Information Technology said.?

It is old data, we are still verifying it; we have sought a report regarding the same: Sources in Ministry of Electronics and Information Technology on alleged Covid vaccination data leak
— ANI (@ANI) June 12, 2023

With ref to some Alleged Cowin data breaches reported on social media, @IndianCERT has immdtly responded n reviewed this

?A Telegram Bot was throwing up Cowin app details upon entry of phone numbers

?The data being accessed by bot from a threat actor database, which seems to…
— Rajeev Chandrasekhar ???? (@Rajeev_GoI) June 12, 2023

The information can be easily fetched by entering the phone number or Aadhar number of an individual.?

A tweet by All India Trinamool Congress spokesperson Saket Gokhale earlier in the day?revealed that the?details of Rajya?Sabha MP and TMC leader Dered O'Brien, former Union Minister P Chidambaram, Congress leaders?Jairam Ramesh and K C Venugopal, journalists Rajdeep Sardesai (India Today) and Barkha Dutt (Mojo Story), were among those that were?leaked in a similar way.?

Congress MP?Karti Chidamabaram, who alleged that his personal data was also leaked,?demanded answers from Union Information Technology minister Ashwini Vaishnaw.?

Accusing?the government of ignoring privacy issues, he?tweeted,?“In its 'Digital India' frenzy, Government of India has woefully ignored citizen privacy. Personal data of every single Indian who got COVID-19 vaccination is publicly available. Including my own data. Who let this happen? Why is Government of India sitting on a data protection law?”

In its Digital India frenzy, GoI has woefully ignored citizen privacy. Personal data of every single Indian who got COVID-19 vaccination is publicly available. Including my own data. Who let this happen? Why is GoI sitting on a data protection law? @AshwiniVaishnaw must answer. pic.twitter.com/mlmq0OuRK5
— Karti P Chidambaram (@KartiPC) June 12, 2023

The CoWIN portal was extensively used during the Covid-19 vaccination drive wherein?most Indians had registered on the portal using their phone numbers. On CoWIN app, the details of registered users are only visible after entering a one-time password (OTP). In contrast, using the Telegram bot, details could be acessed without the use of an OTP.?

The authorities are yet to issue an official satement on the alleged massive data breach.