Alleged breach of India's biometric database could put 1.2bn users at risk

The Indian government has announced new security measures following reports of an alleged security breach in the coun...

Posted: Jan 12, 2018 10:55 AM
Updated: Jan 12, 2018 10:55 AM

The Indian government has announced new security measures following reports of an alleged security breach in the country's vast biometric database, which contains the personal details of 1.2 billion Indian citizens.

The announcement comes a full seven days after journalist Rachna Khaira first identified the alleged breach in an article in the Tribune newspaper, in which it was claimed reporters were able to buy access to citizens' personal details, such as names, addresses, phone numbers and even photos, via an anonymous WhatsApp account for as little as $8.

The database, known officially as Aadhaar, was launched in 2009 as a voluntary program intended to help prevent benefit fraud, it has since grown, and is now home to the collected data -- including fingerprints and iris scans -- of more than a billion Indians, or upwards of 90% of the entire population.

Users are issued with a personal 12-digit identity number which they can then use to access welfare payments, and other government controlled services.

Authorities have been widely criticized for their handling of the allegations, which if proven correct, could expose users to identity fraud and privacy invasions.

The Unique Identification Authority of India (UIDAI), which is responsible for maintaining the database, initially denied the claims, dismissing the Tribune story as "clearly a case of misreporting being incorrect and misleading."

This was followed by a tweet from the official account of the ruling Bharatiya Janata Party (BJP) referring to the report as "fake news," last Thursday.

A day after Khaira's report, the UIDAI filed a police complaint against her, the Tribune newspaper, and the anonymous individuals who allegedly provided them with access to the database, a move that served only to inflame the crisis further, and stoke wider concerns over diminishing press freedoms.

Reporters Without Borders (RSF), the Paris-based NGO which publishes an annual index of press freedom, last year ranked India at 136 out of 180 countries, down 3 places from the previous year, and lagging behind the likes of Myanmar, Colombia and even Zimbabwe.

The controversy led Edward Snowden, the former US National Security Agency contractor and high profile whistle blower, to weigh in with a tweet offering his support to Khaira, Tuesday.

"The journalists exposing the #Aadhaar breach deserve an award, not an investigation. If the government were truly concerned for justice, they would be reforming the policies that destroyed the privacy of a billion Indians. Want to arrest those responsible? They are called @UIDAI," said Snowden.

The agency quickly backtracked, and by late Tuesday afternoon had tweeted its support for press freedoms and its apparent willingness to work with the Tribune to investigate the problem.

It remains unclear, however, whether the UIDAI has in fact dropped its police complaint against Khaira.

Security measures

The newest government security measures, announced late Wednesday, will allow users to generate a randomly-generated virtual ID or token to avoid sharing their direct Aadhaar number for authentication, according to the government notice. A second security measure prevents secondary agencies from storing an individual's Aadhaar number.

Experts say the move will go some way in addressing issues raised in the Tribune report, as well as broader safety concerns.

Amber Sinha, a senior program manager at the Centre for Internet and Society, a research institute based in Delhi and Bangalore described the government's announcement as a welcome measure.

"There have been various kinds of security incidents, but tokenization can definitely address some of them," said Sinha.

According to Sinha, the database's biometric data, which contains the most sensitive information, such as retinal scans, has not been breached and reports in the press are related to demographic data, which can also exist in separate databases, owned by different government agencies or state governments.

Though implemented under the previous administration, Prime Minister Narendra Modi's government has championed the database, and pushed to make Aadhaar cards mandatory.

The new security measures come a day after a report from a research institute affiliated with the Reserve Bank of India labeled the database "a prime target."

"Thanks to Aadhaar, for the first time in the history of India, there is now a readily available single target for cyber criminals as well as India's external enemies ... The loss to the economy and citizens in case of such an attack is bound to be incalculable," said the report by the Institute for Development and Research in Banking Technology.

While the authorities did not cite a specific reason for the new security measures, they did say there were "heightened privacy concerns," according to the statement from the Ministry of Electronics and Information Technology.

Minnesota Coronavirus Cases

Data is updated nightly.

Confirmed Cases: 24850

Reported Deaths: 1050
CountyConfirmedDeaths
Hennepin8393613
Ramsey3019124
Stearns202113
Nobles15395
Anoka139970
Dakota132755
Washington63632
Olmsted62610
Kandiyohi4961
Rice4622
Scott4262
Clay42328
Mower3182
Todd3160
Wright3131
Sherburne2432
Carver2102
Benton1773
Steele1580
Blue Earth1400
Martin1305
St. Louis11814
Freeborn1170
Pine890
Unassigned8910
Nicollet8710
Winona7915
Cottonwood750
Watonwan740
Carlton730
Crow Wing712
Otter Tail680
Goodhue663
Chisago611
Polk612
Lyon560
Itasca5410
Dodge520
Chippewa511
Morrison460
Meeker450
Le Sueur441
Douglas420
Becker400
Jackson390
Murray390
McLeod370
Isanti350
Waseca260
Rock220
Mille Lacs191
Pennington190
Faribault180
Swift180
Wabasha180
Fillmore171
Brown162
Sibley160
Beltrami150
Cass142
Norman130
Marshall120
Pipestone120
Kanabec111
Wilkin113
Wadena100
Pope90
Aitkin80
Koochiching80
Mahnomen61
Yellow Medicine60
Lincoln50
Redwood50
Big Stone50
Renville50
Red Lake40
Grant40
Lac qui Parle30
Clearwater30
Traverse30
Houston20
Hubbard20
Roseau20
Lake10
Kittson10
Stevens10

Iowa Coronavirus Cases

Data is updated nightly.

Confirmed Cases: 19521

Reported Deaths: 535
CountyConfirmedDeaths
Polk4227126
Woodbury275034
Black Hawk174644
Linn95577
Dallas90421
Marshall89416
Buena Vista7830
Johnson6149
Wapello59310
Muscatine55741
Crawford5162
Tama40327
Scott35910
Dubuque34418
Louisa34411
Sioux2750
Pottawattamie2638
Jasper26016
Washington1898
Wright1690
Plymouth1322
Warren1320
Allamakee1214
Story1151
Mahaska9410
Poweshiek908
Henry711
Bremer706
Des Moines631
Boone620
Clinton611
Taylor560
Clarke550
Guthrie503
Cedar471
Benton431
Webster401
Monroe385
Shelby370
Hamilton370
Jones360
Clayton353
Buchanan330
Iowa330
Osceola330
Marion320
Cerro Gordo291
Madison282
Cherokee280
Lee270
Fayette270
Jefferson270
Lyon240
Monona240
Winneshiek240
Harrison230
Davis220
Dickinson210
Grundy200
Mills190
Floyd191
Sac190
Humboldt180
Hardin170
Lucas170
Clay160
Butler161
Hancock160
Delaware150
Emmet150
Keokuk150
Appanoose153
Ida140
Franklin130
Page130
Greene130
Howard120
Cass120
Audubon121
Pocahontas120
Jackson120
Winnebago110
Carroll100
Chickasaw100
Kossuth90
Adair90
Van Buren90
Union80
Adams70
Montgomery70
Palo Alto60
Fremont40
Mitchell40
Ringgold40
Worth30
Calhoun20
Wayne10
Decatur10
Unassigned10
Rochester
Overcast
65° wxIcon
Hi: 74° Lo: 60°
Feels Like: 65°
Mason City
Broken Clouds
63° wxIcon
Hi: 75° Lo: 59°
Feels Like: 63°
Albert Lea
Clear
64° wxIcon
Hi: 74° Lo: 60°
Feels Like: 64°
Austin
Clear
66° wxIcon
Hi: 76° Lo: 61°
Feels Like: 66°
Charles City
Few Clouds
63° wxIcon
Hi: 74° Lo: 59°
Feels Like: 63°
Things are about to get hot
KIMT Radar
KIMT Eye in the sky

Latest Video

Image

Minnesota churches open doors to more congregants

Image

George Floyd protests continue in Austin on Sunday

Image

Sean Weather 5/31 2

Image

Rochester restaurant prepares to open patio to public

Image

Sean Weather 5/31

Image

Rochester People's Rally

Image

Religious leaders call for justice for George Floyd

Image

Rochester downtown under curfew Saturday night

Image

Sean Weather 5/30

Image

Governor Walz GivesUpdate

Community Events