Indian state government fixes website bug that revealed Aadhaar numbers and fingerprints


According to a security researcher, a glitch on an Indian state government website inadvertently exposed papers comprising people’ Aadhaar numbers, identity cards, and fingerprint copies. The problem was addressed last week after the security researcher informed local authorities about it.

Sourajeet Majumder discovered the flaw in the West Bengal government’s e-District web platform, which allows inhabitants of the state to access government services such as birth and death certificates and building applications online. According to Majumder, the website bug meant that land deeds, which contain details about the owners of a piece of property, could be obtained from the e-District website by guessing sequential deed application numbers.

Read More…