FB pixel

State government fixes bug exposing Aadhaar biometric records

Philippines responds to breach allegations
State government fixes bug exposing Aadhaar biometric records
 

Fingerprint biometrics submitted to India’s national ID system, Aadhaar, have been exposed by the West Bengal state government website, TechCrunch reports.

Security researcher Sourajeet Majumder found and reported a bug that exposed Aadhaar digital ID numbers, identity documents, photographs and images of fingerprints on the e-District web portal. Soon after he reported the bug to government cybersecurity body CERT-In and the West Bengal government, it was fixed, according to the report.

The bug allowed a prospective attacker to guess sequences of 16-digital deed application numbers, and publicly available tools enabled valid numbers to be identified based on responses from the server.

The fear is that a malicious attacker may have discovered the path to people’s biometrics before Majumder reported it and could use the data to mount spoof attacks. The Unique Identification Authority of India (UIDAI) recently implemented liveness detection for fingerprint biometrics to stem incidents of fraud carried out with presentation attacks against the Aadhaar-enabled Payment System.

The UIDAI has launched a bug bounty program to find and close security vulnerabilities in Aadhaar’s biometric database last year.

India has been plagued by data breaches from state government and private sector portals over the past decade, though the UIDAI has denied allegations that biometric data has been leaked from the centralized database.

Philippines denies details of data breach accusations

The Philippine Statistics Authority (PSA) has responded to allegations on social media of a data breach by assuring the public that biometric and digital ID data held by the Philippine Identification System (PhilSys) and the Civil Registration System (CRS) has not been stolen.

The allegations themselves are malware attempts, the agency says. However, an investigation by the PSA’s Data Breach Response Team found that personal data from the Community-Based Monitoring System, a local planning tool, may have been compromised.

Article Topics

 |   |   |   |   | 

Latest Biometrics News

 

Reach of Musk, DOGE’s federal data access sets off privacy, security alarms

Led by tech billionaire Elon Musk and a shadowy team believed to be under his control, the United States DOGE…

 

Mobile driver’s licenses on the cusp of ‘major paradigm shift’

More entities have integrated the California mobile driver’s license (mDL) credential for identity verification. Although just 15 states have introduced…

 

Gesture-based age estimation tool BorderAge joins Australia age assurance trial

Australia’s age assurance technology trial is testing the new biometric tool that performs age estimation based on hand gestures. The…

 

European AI compliance project CERTAIN launches

The pan-European project to create AI compliance tools CERTAIN has kicked off its work, with the goal of making European…

 

Signaturit Group acquiring Validated ID for undisclosed sum

Spain-based digital identity and electronic signature provider Validated ID is being acquired by Signaturit Group, a European company offering identity…

 

South Africa will invest in DPI, says President

South Africa is planning to invest in digital public infrastructure (DPI) , including the launch of a national digital identity…

Comments

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.

DIGITAL ID for ALL NEWS

Featured Company

ID for ALL FEATURE REPORTS

BIOMETRICS WHITE PAPERS

BIOMETRICS EVENTS

EXPLAINING BIOMETRICS