majumder

Years of personal data leaks: Indian government’s cloud

India Flag Cert Data Leak Binary
The Indian government has finally resolved a years-long cybersecurity issue that exposed reams of sensitive data about its citizens. At fault was the Indian government’s cloud service, dubbed S3WaaS, which is billed as a “secure and scalable” system for building and hosting Indian government websites. With evidence of ongoing exposures of private data, Majumder asked TechCrunch for help getting the remaining data secured. Majumder said that some citizens’ sensitive data began spilling online long after he first disclosed the misconfiguration in 2022. The exposed data, Majumder said, potentially puts citizens at risk of identity thefts and scams.