Live
- Mcap plunges by Rs 2.19 L cr
- Kenya cancels airport, energy deals
- Plans underway for green ammonia plant in Kakinada
- TG may review MoUs with Adani
- Lokayukta conducts raids on Mines and Geology Officer
- Minister Durgesh urged not to impose entry fees on tourists at beaches
- Naxal Resettlement and Surrender Committee to visit Vikram Gowda encounter site
- 10 yrs of BRS ‘misrule’ Vs 10 mths of people’s govt
- Bid to revitalise industrial sector in East Godavari
- Have no trust in pre-poll surveys, says DKS
Govt of India denies CoWin Data breach
Reports claiming a breach of date of beneficiaries registered on the CoWin platfrom went viral leading to criticism form Congress which accused the government of leaking the data.
New Delhi: Reports claiming a breach of date of beneficiaries registered on the CoWin platfrom went viral leading to criticism form Congress which accused the government of leaking the data.
But the government on Monday said reports claiming a breach of data of beneficiaries registered on the CoWIN platform were "mischievous" and "without any basis", and that the matter has been reviewed by the country's nodal cyber security agency CERT-In.
It said the CoWIN portal is completely safe with adequate safeguards for data privacy, the Health Ministry said in a statement, adding an internal exercise has been initiated to review the existing security measures. Rajeev Chandrasekhar, the Union Minister of State for Electronics and Information Technology, said the Indian Computer Emergency Response Team (CERT-In) immediately responded and it does not appear that Cowin app or database has been directly breached.
He said a Telegram Bot was throwing up Cowin app details upon entry of phone numbers. "The data being accessed by bot from a threat actor database, which seems to have been populated with previously breached/stolen data stolen from past. It does not appear that Cowin app or database has been directly breached," the minister said.
The health ministry said there are reports alleging the breach of data from the CoWIN portal, which is repository of all data of beneficiaries who have been vaccinated against COVID-19. "It is clarified that all such reports are without any basis and mischievous in nature. Co-WIN portal of Health Ministry is completely safe with adequate safeguards for data privacy," it said.
Furthermore, security measures are in place on CoWIN portal with web application firewall, regular vulnerability assessment, and Identity and Access Management, it said. "Only OTP authentication-based access of data is provided. All steps have been taken and are being taken to ensure security of the data in the CoWIN portal," the ministry said. "CERT-In in its initial report has pointed out that backend database for Telegram bot was not directly accessing the APIs of CoWIN database," the statement said. It said certain Twitter users have claimed the personal data of individuals who have been vaccinated is being accessed using a Telegram (online messenger application) Bot. It is reported that the bot has been able to pull individual data by simply passing the mobile number or Aadhaar number of a beneficiary, the ministry said.
The COWIN system tracks and keeps record of each time an authorided user accesses the COWIN system, the statement said. "Without OTP, vaccinated beneficiaries' data cannot be shared to any BOT," the ministry said.
