Data Breach Exposes Bank Account Details of 280 Million Indian Citizens
- Securityish
- Privacy & Personal Security
Quick Summary
A security researcher, Volodymyr Diachenko, discovered over 280 million bank account records of Indian citizens exposed online. The data includes sensitive personal information such as Aadhaar Card Numbers and employment details. This breach raises significant concerns about identity theft and phishing attacks if not addressed promptly by the Indian government.
The Securityish Brief
Volodymyr Diachenko, also known as Bob, reported a serious data breach affecting over 280 million Indian citizens. He discovered two unsecured IP addresses during research, one containing 280,472,980 records and the other with 8,390,500 records. The exposed data includes Universal Account Numbers (UANs), Aadhaar Card Numbers, IFSC codes, employment details, and family members’ personal information.
Diachenko, the founder of SecurityDiscovery.com, provided evidence of the breach through screenshots shared on social media. He noted that the databases were accessible due to the server being left unsecured. The information could enable hackers to create virtual profiles for identity theft and spear phishing attacks.
The breach was reported to the Employees Provident Fund Organization (EPFO) and CERT-in, leading to the databases being secured with a password and two-factor authentication. This incident follows a previous data breach related to Aadhaar that occurred four years ago, which raised concerns about the security of sensitive information managed by CSC e-Governance India LTD.
Implications for Users and Organizations
This incident highlights the ongoing risks associated with data security in India, particularly concerning personal financial information. Users should be aware that their sensitive data can be exposed if proper security measures are not implemented.
Organizations managing sensitive personal data need to prioritize securing their databases against unauthorized access. Regular audits and security assessments can help identify vulnerabilities before they are exploited.
Individuals should monitor their accounts for unusual activity and consider implementing additional security measures, such as multi-factor authentication, to protect their personal information.
Key Takeaways
- Monitor your bank accounts for any unauthorized transactions or unusual activity.
- Consider enabling multi-factor authentication on your financial accounts to enhance security.
- Be cautious of unsolicited communications requesting personal information, as they may be phishing attempts.
- Regularly update your passwords and use unique passwords for different accounts.
- Stay informed about data breaches and security updates from organizations managing your personal data.
Key Terms & Concepts
- Universal Account Number (UAN): In this article, UAN refers to a unique 12-digit number assigned to employees contributing to the Employees Provident Fund Organization.
- Aadhaar Card Number: Aadhaar Card Number is a unique identification number issued to residents of India, used for various services and benefits.
- CERT-in: CERT-in is the Indian Computer Emergency Response Team, responsible for responding to cybersecurity incidents and threats.
Read the original article here: https://www.cybersecurity-insiders.com/bank-account-details-of-about-280m-indian-citizens-exposed-on-the-web/
Your 5-Minute Securityish Brief
A weekly digest of cybersecurity news, phishing alerts, privacy tips, and emerging threats, simplified so anyone can understand what matters and why.
Securityish
Securityish explains cybersecurity, scams, data breaches, and privacy risks in simple language so you know what’s happening and how to protect yourself.
© 2026 Securityish
