No offshore: US ruling to hit Indian IT sector

New Delhi, May 6: The government on Wednesday said no data or security breach has been identified in Aarogya Setu after an ethical hacker raised concerns about a potential security issue in the app.

The app is the government's mobile application for contact tracing and disseminating medical advisories to users in order to contain the spread of coronavirus.

On Tuesday, a French hacker and cyber security expert Elliot Alderson had claimed that "a security issue has been found" in the app and that "privacy of 90 million Indians is at stake".

Dismissing the claims, the government said "no personal information of any user has been proven to be at risk by this ethical hacker".

"We are continuously testing and upgrading our systems. Team Aarogya Setu assures everyone that no data or security breach has been identified," the government said through the app’s Twitter handle.

The tweet gave point-by-point clarification on the red flags raised by the hacker.

"We discussed with the hacker and were made aware of the following... the app fetches user location on a few occasions," it said, but added that this was by design and is clearly detailed in the privacy policy.

The app fetches users’ location and stores on the server in a secure, encrypted, anonymised manner - at the time of registration, at the time of self assessment, when users submit their contact tracing data voluntary through the app or when it fetches the contact tracing data of users after they have turned COVID-19 positive, it said.

On another issue that users can get COVID-19 stats displayed on the home screen by changing the radius and latitude-longitude using a script, Aarogya Setu said that all this information is already public for all locations and hence does not compromise on any personal or sensitive data.

"We thank the ethical hacker on engaging with us. We encourage any users who identify a vulnerability to inform us immediately...," it said.

Responding to Aarogya Setu's clarification, Alderson tweeted, "I will come back to you tomorrow".

Mumbai, Mar 28: Doctors in Mumbai have not been spared by the novel coronavirus. As Mumbai’s count for Covid-19 cases went up to 58, an octogenarian doctor from Saifee Hospital passed away on Friday. He was a suspected case of coronavirus with co-morbid conditions like diabetes and had a pacemaker implanted, said a press release from the state health department.

As per a statement from Saifee Hospital, he underwent a CT scan at Saifee Hospital and was diagnosed positive for Covid-19. The surgeon was transferred to the special isolation facility at PD Hinduja Hospital where he subsequently died. Behranwala’s close relatives had come down from England and were under quarantine.

In a statement, Saifee Hospital, where Behranwala underwent CT scan, said, "All containment and surveillance measures have been implemented to ensure the safety of our staff patients and visitors. Saifee Hospital reiterates that the Hospital is fully operational," said Dr Vernon Desa, Director (Medical governance and clinical compliance) Saifee Hospital.

In the second case, an Andheri-based doctor, aged 53, has been tested positive along with his 43-year-old wife and 20-year-old daughter. The family doesn’t have a travel history. The doctor reportedly came in contact with the virus through a patient. MCGM has taken samples of 60 patients who came in contact with the doctor. "As of now, no patient from his contact has tested positive," Assistant Commissioner, Vishwas Mote.

Another doctor who practiced at Vakola tested positive after he came in contact with a person having travel history to Italy, later tested positive. The doctor has been admitted at Raheja hospital and samples of his close contact have been taken.