FB pixel

State gas company leaks millions of Aadhaar numbers in second breach

 

A state-owned gas company in India has exposed the personal information of an estimated 6.8 million people to Google searches, including Aadhaar numbers, Vice News reports. The leak was discovered by French security expert Baptiste Robert, and detailed in a Medium post four days after the company, which did not respond, was notified.

Indane provides subsidies of liquified petroleum gas, and by making accounts visible through a dealer portal unprotected with authentication, the names, addresses, and Aadhaar numbers of customers were exposed. The Unique Identification Authority of India (UIDAI) has previously said Aadhaar numbers, while not secret for verification purposes, should be protected like other identity documents and sensitive items such as credit cards.

TechCrunch has verified Robert’s findings, but Indane initially denied that there had been a leak, before taking its website offline.

A state government also leaked Aadhaar numbers of 160,000 government workers last month, according to Vice.

The UIDAI has consistently held that the deduplication and biometric identity verification features of Aadhaar make it secure against such leaks, and when an Indane endpoint vulnerability exposed personal information in early 2018, said its own database remained secure and no biometric data had been compromised. The agency has also previously said that exposure of Aadhaar information does not constitute a breach, but with national elections just months away, the national ID system, which has been both a signature project and a source of headaches for the Modi government, does not seem to be assuring the Indian public.

Aadhaar is still necessary for many transactions, however, and following the government’s commitment to the system, businesses including companies like NEXT Biometrics have invested in providing authentication under the world’s largest biometric program.

Article Topics

 |   |   |   | 

Latest Biometrics News

 

Keyless’ ‘Zero-Knowledge Biometrics’ enable crypto wallet to meet MFA requirements

Swiss-licensed crypto wallet Relai has integrated biometric authentication from Keyless for logins, account recovery and account deletion. Keyless’ privacy-preserving authentication…

 

CBP biometric expansion at US borders moves ahead with new global entry plans

As the Trump administration doubles down on biometric surveillance at U.S. borders, Customs and Border Protection (CBP) is preparing for…

 

New Oloid privacy architecture to protect enterprise biometrics unveiled

Many enterprises scrambling to adopt biometrics to defend against fraud are struggling to ensure regulatory compliance and the trust of…

 

Biometrics top consumer choice to fend off AI fraud in finance

Veriff’s latest “The Future of Finance” report reveals that online identity verification fraud in financial services has surged with the…

 

Taiwan gathers perspectives on digital wallet as national infrastructure

Taiwan’s Ministry of Digital Development has concluded a series of workshops on the digital ID  wallet, bringing together experts and…

 

Idemia PS to share inside look at multi-modal biometrics registration solution

Idemia Public Security has upgraded its LiveScan series of biometric enrollment workstations with the Touch Print Enterprise 6, and presents…

Comments

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Biometric Market Analysis

Most Viewed This Week

Featured Company

Biometrics Insight, Opinion

Digital ID In-Depth

Biometrics White Papers

Biometrics Events