Congress to fight land bill in states: Rahul Gandhi

New Delhi, Jun 3: Over 1 lakh scanned copies of Indians' national IDs, including Aadhaar, PAN card and passport, have been put on dark web for sale, cyber intelligence firm Cyble said on Wednesday.

The leaked data seems to have originated from a third party and not from the government system, according to a report by Cyble.

"We came across a non-reputed actor who is currently selling over 1 lakh Indian National IDs on the dark net. With such a low reputation, ideally, we would have skipped this; however, the samples shared by the actor intrigued our interest -- and also the volume. The actor is alleged to have access to over 1 lakh IDs from different places in India," Cyble said.

The personal data leaked by cyber criminals leads to various nefarious activities such as identity thefts, scams, and corporate espionage. Many criminals use the personal details in the IDs to win trust of the people over a phone call for fraudulent activities.

Cyber criminals leak personal data of 2.9 cr job-seeking Indians on dark web for free

The Cyble researchers acquired around 1,000 IDs from the seller and confirmed that the scanned IDs belong to Indians.

"Preliminary analysis suggests that the data originated from a third party, and no indication or artefact is indicating that it came from a government system. At this point, Cyble researchers are still investigating this further -- we are hoping to share an update soon," Cyble said.

The scanned ID documents indicate that the data may have been leaked from a company's data base in the segment where they have to comply with 'Know Your Customer' (KYC) norms.

"Cyble researchers have also learned about a surge in KYC and banking scams -- leaks such as this are often used by scammers to target individuals, especially elderlies," Cyble said.

The cyber intelligence firm has recommended people to refrain from sharing personal information especially financial information over phone, e-mail or SMS.

"Regularly monitor your financial transaction, if you notice any suspicious transaction, contact your bank immediately," the company said.

In May, Cyble showed two instances where personal data of 7.65 crore Indians have been put on sale in the dark web. In one instance, the seller claimed to have sourced data of 4.75 crore Indians from online directory Truecaller and in other, the seller claimed to have sourced from job websites.

Truecaller, however, had denied the claim of breach in its database.

New Delhi, Mar 15: The new rules for debit and credit cards to increase security and reduce frauds kick in from Monday. In January, the Reserve Bank of India (RBI) had issued new rules to improve user convenience and increase the security of card transactions. These rules will help in curbing the misuse of debit and credit cards.

RBI has directed banks to allow only domestic card transactions at ATMs and PoS terminals in India at the time of issuance/reissuance of card. For international transactions, online transactions, card-not-present transactions and contactless transactions, customers will have to separately set up services on their card.

These rules will be applicable for new cards from March 16. Those with old cards can decide whether to disable any of these features.

As per the existing rules, these services used to come automatically with the card, but now it will start at the request of the customer.

Debit or credit card customers who have not yet done any online transaction, contactless transaction or international transaction with the card, then these services on the card will automatically stop from March 16.

The Reserve Bank has asked all banks to provide mobile banking, net banking option to enable limit and enable and disable service 24 hours a day, seven days a week.

If the customer makes any change in the status of the card, the bank will alert the customer through SMS/email and send the information.

Issuers shall provide to all cardholders facility to switch on/off and set/modify transaction limits (within the overall card limit, if any, set by the issuer) for all types of transactions -- domestic and international, at PoS/ATMs/online transactions/contactless transactions, etc.,

The provisions, however, are not mandatory for prepaid gift cards and those used at mass transit systems.

The latest instructions come in the wake of rising instances of cyber frauds and the huge increase in the use of cards.

New Delhi, Feb 12: The Centre on Wednesday said the NRC data in Assam is safe even though some technical issues were visible and that will be resolved soon.

The Union Home Ministry clarification came in view of reports that data of the final list of the National Register of Citizens has been made offline from its official website.

"The NRC data is safe. Some technical issues are in visibility on cloud. These are being resolved soon," a home ministry spokesperson said.

The data was not available for a couple of days and it created panic in the public, mostly among the people excluded from the list as the rejection certificates were yet to be issued.

NRC State Coordinator Hitesh Dev Sarma accepted that the data has been made offline, but refuted the allegation of any "malafide" intent in it.

The cloud service for the huge set of data was provided by IT firm Wipro and their contract was till October 19 last year. However, this was not renewed by the previous coordinator.

So, the data got offline from December 15 after it was suspended by Wipro, Sarma said.

He said the state coordination committee had decided to do necessary formalities in its meeting on January 30 and wrote to the Wipro during the first week of February.

"Once Wipro makes the data live, it will be available for public. We hope people will be able to access it in the next 2-3 days," Sarma said.

The complete detail of exclusion and inclusion of bonafide Indian citizens in the NRC was uploaded on its official website http://www.nrcassam.nic.in after the final list was published on August 31, 2019.

The final NRC was published by excluding 19,06,657 persons. A total of 3,11,21,004 names were included out of 3,30,27,661 applicants.

After the earlier NRC State Coordinator Prateek Hajela relinquished the charge on November 11 following his transfer to home state Madhya Pradesh on a direction from the Supreme Court, Sarma was appointed in his place on November 9.