Monday , June 23 2025

Indian CoWIN health database leaked: How safe “Surokkha” in Bangladesh

Several Indian media report that a massive data breach of the CoWIN portal (The central platform for COVID-19 vaccination registration in India) had happened.

Hackers Bypass Gmail MFA With App-Specific Password Reuse

A hacking group reportedly linked to Russian government has been discovered using a new phishing method that bypasses two-factor authentication...
Read More
Hackers Bypass Gmail MFA With App-Specific Password Reuse

Russia detects first SuperCard malware attacks via NFC

Russian cybersecurity experts discovered the first local data theft attacks using a modified version of legitimate near field communication (NFC)...
Read More
Russia detects first SuperCard malware attacks via NFC

Income Property Investments exposes 170,000+ Individuals record

Cybersecurity researcher Jeremiah Fowler discovered an unsecured database with 170,360 records belonging to a real estate company. It contained personal...
Read More
Income Property Investments exposes 170,000+ Individuals record

ALERT (CVE: 2023-28771)
Zyxel Firewalls Under Attack via CVE-2023-28771 by 244 IPs

GreyNoise found attempts to exploit CVE-2023-28771, a vulnerability in Zyxel's IKE affecting UDP port 500. The attack centers around CVE-2023-28771,...
Read More
ALERT (CVE: 2023-28771)  Zyxel Firewalls Under Attack via CVE-2023-28771 by 244 IPs

CISA Flags Active Exploits in Apple iOS and TP-Link Routers

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has recently included two high-risk vulnerabilities in its Known Exploited Vulnerabilities (KEV)...
Read More
CISA Flags Active Exploits in Apple iOS and TP-Link Routers

10K Records Allegedly from Mac Cloud Provider’s Customers Leaked Online

SafetyDetectives’ Cybersecurity Team discovered a public post on a clear web forum in which a threat actor claimed to have...
Read More
10K Records Allegedly from Mac Cloud Provider’s Customers Leaked Online

Canada 2nd largest airlines “WestJet” investigates cyberattack disrupting internal systems

WestJet, Canada's second-largest airline, is looking into a cyberattack that has affected some internal systems during its response to the...
Read More
Canada 2nd largest airlines “WestJet” investigates cyberattack disrupting internal systems

Paraguay 7.4 Million Citizen Records Leaked on Dark Web

Resecurity found 7.4 million records of Paraguayan citizens' personal information leaked on the dark web today. Last week, cybercriminals attempted...
Read More
Paraguay 7.4 Million Citizen Records Leaked on Dark Web

High-Severity Flaw in HashiCorp Nomad Allows Privilege Escalation

HashiCorp has revealed a critical vulnerability in its Nomad tool that may let attackers gain higher privileges by misusing the...
Read More
High-Severity Flaw in HashiCorp Nomad Allows Privilege Escalation

SoftBank: Over 137,000 personal info leaked

SoftBank has disclosed that personal information of more than 137,000 mobile subscribers—covering names, addresses, and phone numbers—might have been leaked...
Read More
SoftBank: Over 137,000 personal info leaked

For this breach media report one billion Indian citizens’ data is at risk. This data leak has also exposed the Aadhaar card, Voter ID, and PAN Card numbers of thousands of Indian citizens, rendering them accessible to anyone on Telegram.

Some famous Indian politician has shared the leaked data screenshot. Saket Gokhale wrote his tweeter handle :

“There has been a major data breach of Modi Govt where personal details of all vaccinated Indians including their mobile nos., Aadhaar numbers, Passport numbers, Voter ID, Details of family members etc. have been leaked & are freely available.”

He placed some famous person’s personal detail:

There are several Opposition leaders which include: 1. Rajya Sabha MP & TMC Leader Derek O’Brien 2. Former Union Minister P. Chidambaram 3. Congress leaders Jairam Ramesh & K.C. Venugopal

The CoWIN data breach doesn’t stop here. Various news reports have confirmed that if multiple individuals had registered from the same mobile number, the Telegram bot would reveal the details of all individuals in one go.

This means that if a family had booked vaccine slots for multiple members using the same mobile number, their personal information would be exposed collectively.

Media report personal identification information of several top political leaders including India’s Former Union Minister P. Chidambaram, Secretary of the Union Health Ministry, Rajesh Bhushan and his wife, Ritu Khanduri Bhushan who is a Member of the Legislative Assembly from Uttarakhand, Central opposition leaders Jairam Ramesh and K.C. Venugopal, have been exposed.

While the CoWIN portal supposedly had a One Time Password (OTP) security system, it remains unclear how this data leak occurred on Telegram.

However, hours after reports of the alleged CoWIN data breach surfaced, the Indian government refuted the claims stating that the Health Ministry’s CoWIN platform was “completely safe”.

“Certain posts on the social media platform Twitter have claimed using a Telegram (online messenger application) BOT, the personal data of individuals who have been vaccinated is being accessed. It is reported that the BOT has been able to pull individual data by simply passing the mobile number or Aadhaar number of a beneficiary.”

Calling such reports “without any basis” and “mischievous in nature”, the ministry clarified that the CoWIN portal was “completely safe with adequate safeguards for data privacy”.

Elaborating on the security measure, the statement read, “There are security measures in place on Co-WIN portal, with Web Application Firewall, Anti-DDoS, SSL/TLS, regular vulnerability assessment, Identity & Access Management etc. Only OTP authentication-based access of data is provided.

The statement further explained that the development team of COWIN confirmed that there were no public APIs where data can be pulled without an OTP. However, elaborated that one such API had a feature of sharing the data by calling using just a mobile number of Aadhaar.

“However, even this API is very specific and the requests are only accepted from a trusted API which has been white-listed by the CoWIN application,” the statement read.

Following the speculations around the alleged CoWIN data breach, the Union Health Ministry requested the Indian Computer Emergency Response Team (CERT-In) to investigate the issue and submit the report.

However, the initial report by CERT-In noted that the backend database for Telegram bot was not directly accessing the APIs of CoWIN database.

An internal probe to review the existing security measures of CoWIN has also been initiated.

Eng. Md. Saiful Alam Khan told Infosecbulletin.com that “We are aware of it, the “Surokkha” platform is now totally safe, no abnormal something is found. Though our system is safe, from user end there is always to be cautious.”

 

 

Check Also

GreyNoise

ALERT (CVE: 2023-28771)
Zyxel Firewalls Under Attack via CVE-2023-28771 by 244 IPs

GreyNoise found attempts to exploit CVE-2023-28771, a vulnerability in Zyxel’s IKE affecting UDP port 500. …

Leave a Reply

Your email address will not be published. Required fields are marked *