COWIN / Data of COWIN app leaked, personal data of 20 thousand people at risk!

Personal data of thousands of people in India, including their names, mobile numbers, addresses and COVID test results, has been leaked from a government server. This information can be accessed using an online search. The leaked data has been put up for sale on a website called Red Forum, where a cybercriminal has claimed to have personal data of over 20,000 people. The names, mobile numbers, addresses and test results of Kovid have been released on the Red Forum website.

Cyber ​​expert warns

PII including Name, MOB, PAN, Address etc of #Covid19 #RTPCR results & #Cowin data getting public through a Govt CDN. #Google indexed almost 9 Lac public/private #GovtDocuments in search engines. Patient's data is now listed on #DarkWeb. Need fast deindex#Infosec @IndianCERT pic.twitter.com/LgQxZZi8T6

— Rajshekhar Rajaharia (@rajaharia) January 19, 2022

Cyber ​​security expert Rajshekhar Rajahariya tweeted that '#Covid19 #RTPCR test result and #Cowin data including name, mobile number, PAN, address etc. PII is becoming public through a government CDN. #Google has indexed about 9 lakh public/private #GovtDocuments in the search engine. Patient data is now listed on #Darkweb.

The doctor denied the news

A sample document shared on the Raid forum shows that the leaked data was meant to be uploaded on the Co-Win portal. Cowin Chief Dr RS Sharma has denied the news of data leak of Cowin portal. Dr RS Sharma said, 'Prima facie this does not seem to be a case of data leak of Cowin portal because no one's address or Kovid report is uploaded on Cowin portal. However, in the public interest, we are investigating this matter and will be able to tell anything further only after the investigation.