US-based cyber threat intelligence company Cyble has announced a major leak of Indian National IDs over the dark web.
The total size of data is alleged over 100 GB.
The firm mentioned in its report that there are over 110,000 national IDs available in the dump. They acquired a sample of 1000 IDs and confirm that they are indeed Indian National IDs, including passport, PAN card, voters card, Aadhaar, driver license and more.
During the investigation, Cyble noted that the files originated from data collected from 2017 to 2020.
The firm is determining the source of the leak. In the last four weeks, the researchers at Cyble are on the edge of their seats as major data leaks have taken place including Weibo accounts, credit card information, Truecaller user dump, personal information of Indian job seekers, and more.
In this instance, the firm said that a non-reputed actor is claiming to have access to over 100,000 national IDs from different locations in India. The total size is believe to be over 100 GB. Though the actor has a low reputation and in general such claims get skip by the experts, this particular leak is sensitive as the data dump has national IDs and that too in large volume
“Preliminary analysis suggests that the data originated from a third party, and no indication or artefact is indicating that it came from a government system. At this point, Cyble researchers are still investigating this further — we are hoping to share an update soon,” Cyble said.
Cyble found out that the data came from a third-party source. There are no indications that the data was leak from a government system. The researchers pointed out that they have learned about a surge in banking and KYC scams in India.