[ad_1]
CoWIN Data Breach: Millions of User’s Personal Details Exposed
The Indian Government’s CoWIN Portal was recently targeted by an unidentified data breach, compromising the sensitive personal details of millions of registered users. This puts National Safety and Security at risk for the citizens of India. The Indian government has now addressed the issue. Keep reading to learn more details.
CoWIN Data Breach Affects Millions of Users
As claimed by widely spread social media posts, a Telegram bot leaked sensitive data upon inquiry of an individual’s phone number. The leaked data includes name, Aadhaar number, Pan number, date of birth, location, gender, and institute where they got vaccinated. These details were collected during registration for the CoWIN app.
CoWIN is the government’s web portal for COVID-19 vaccination registration. It’s managed and operated by the Ministry of Health and Family Welfare.
Union Minister of State for Entrepreneurship, Skill Development, Electronics & Technology, Rajeev Chandrasekhar, confirmed the same via a tweet but claimed that the data that was accessible to the bot had been collected from previously stolen data. He further added that the CoWIN database or the app had not been directly breached. To reassure the public, he confirmed that a National Data Governance policy had been finalized across all of the government, providing unified data storage, access, and security standards.
The Ministry of Health and Family Welfare’s Statement on the CoWIN Data Breach
The Ministry of Health and Family Welfare released a statement on the CoWIN data breach fiasco, affirming adequate security measures in place like Web Application Firewalls, Anti-DDOS protocols, SSL/TLS protocols, and more to eliminate external threats. The statement further confirms that no data can be accessed without OTP Authentication. It said, “Security Measures are in place on the Co-WIN portal, with Web Application Firewall, Anti-DDoS, SSL/TLS, regular vulnerability assessment, Identity & Access Management, etc.”
The breach seems impossible as there’s no public API for the CoWIN app whatsoever. However, the Indian Computer Emergency Response Team (CERT-In) will look into the issue, and an internal security committee will be initiated to review the issue if needed.
What’s the Impact of a Data Breach, and How Can You Protect Yourself?
Data breaches, no matter how small or large, are a matter of concern. When it happens at this scale, the magnitude is amplified tenfold. We hope that the damage isn’t severe and that prompt measures will be taken to neutralize the threat. It’s crucial for you to take steps to protect yourself from online threats. Here are a few things you can do:
Be Cautious About Sharing Personal Information
Be careful about sharing your personal information online and try to limit where you share it. Don’t share your personal details photograph or document with any random website or online people.
Use Strong Passwords
Ensure that you use strong passwords for all your accounts, and also enable two-factor authentication for applications.
Regularly Monitor Your Bank Accounts and Credit Reports
Monitor your bank accounts regularly and report any unauthorized activity. Check your credit report regularly and look out for any issues.
Conclusion
The CoWIN data breach is a significant concern for India’s national data security and safety. The government’s assurance that no direct breach occurred and the measures in place to prevent external threats are reassuring. It’s important to exercise caution when sharing sensitive personal data online and take steps to protect oneself from online threats.
FAQs
What is CoWIN?
CoWIN is the government’s web portal for COVID-19 vaccination registration in India, managed and operated by the Ministry of Health and Family Welfare.
What data was leaked during the CoWIN data breach?
The sensitive personal data that was leaked during the CoWIN data breach includes an individual’s name, Aadhaar number, Pan number, date of birth, location, gender, and institute where they got vaccinated.
What should individuals do to protect themselves online?
Individuals should be cautious while sharing their sensitive personal data online. Strengthen passwords, limit sharing of personal data online and monitor their bank accounts and credit reports regularly.
[ad_2]