Will go it alone in 2019 LS polls if BSP gets a raw deal: Mayawati warns allies

New Delhi, Jun 3: Over 1 lakh scanned copies of Indians' national IDs, including Aadhaar, PAN card and passport, have been put on dark web for sale, cyber intelligence firm Cyble said on Wednesday.

The leaked data seems to have originated from a third party and not from the government system, according to a report by Cyble.

"We came across a non-reputed actor who is currently selling over 1 lakh Indian National IDs on the dark net. With such a low reputation, ideally, we would have skipped this; however, the samples shared by the actor intrigued our interest -- and also the volume. The actor is alleged to have access to over 1 lakh IDs from different places in India," Cyble said.

The personal data leaked by cyber criminals leads to various nefarious activities such as identity thefts, scams, and corporate espionage. Many criminals use the personal details in the IDs to win trust of the people over a phone call for fraudulent activities.

Cyber criminals leak personal data of 2.9 cr job-seeking Indians on dark web for free

The Cyble researchers acquired around 1,000 IDs from the seller and confirmed that the scanned IDs belong to Indians.

"Preliminary analysis suggests that the data originated from a third party, and no indication or artefact is indicating that it came from a government system. At this point, Cyble researchers are still investigating this further -- we are hoping to share an update soon," Cyble said.

The scanned ID documents indicate that the data may have been leaked from a company's data base in the segment where they have to comply with 'Know Your Customer' (KYC) norms.

"Cyble researchers have also learned about a surge in KYC and banking scams -- leaks such as this are often used by scammers to target individuals, especially elderlies," Cyble said.

The cyber intelligence firm has recommended people to refrain from sharing personal information especially financial information over phone, e-mail or SMS.

"Regularly monitor your financial transaction, if you notice any suspicious transaction, contact your bank immediately," the company said.

In May, Cyble showed two instances where personal data of 7.65 crore Indians have been put on sale in the dark web. In one instance, the seller claimed to have sourced data of 4.75 crore Indians from online directory Truecaller and in other, the seller claimed to have sourced from job websites.

Truecaller, however, had denied the claim of breach in its database.

New Delhi, Feb 5: Delhi High Court on Wednesday stated that that death warrant of all convicts in the Nirbhaya gangrape and murder case should be executed together.

The Delhi prison rules do not state whether when the mercy petition of one convict is pending, the execution of the other convicts can take place and from the trial court to Supreme Court all convicts have been held by a common order and a common judgment, Justice Suresh Kumar Kait observed while passing the order.

High Court dismissed the Central government and Tihar Jail authorities plea challenging the Patiala House court's order, which stayed the execution of the four convicts in the case. It also observed that the convicts indulged in a heinous offence of a bone-chilling rape and murder of a girl and that criminal appeals by all convicts were dismissed by the courts.

Moreover, the court observed that the review petitions were filed after long wait and convicts are taking shelter of Article 21 which is available to them till their last breath.

A single-judge bench of Justice Suresh Kumar Kait had on Sunday kept the order reserved in the matter after special hearing of two days.

Earlier, Solicitor General Tushar Mehta, appearing on behalf of the Centre, alleged that the convicts were deliberately delaying the execution, adding that any delay in death sentence will have a dehumanising effect on the convicts.

A Delhi court last week stayed till further orders the execution of the four convicts -- Akshay Thakur, Mukesh Singh, Pawan Gupta, and Vinay Sharma -- which was earlier scheduled to take place on February 1.

The case pertains to the gang-rape and brutal murder of a 23-year-old paramedical student in a moving bus on the night of December 16, 2012, by six people, including a juvenile, in Delhi. The woman had died at a Singapore hospital a few days later.

One of the five adults accused, Ram Singh, had allegedly committed suicide in the Tihar Jail during the trial of the case.

Thiruvananthapuram, Apr 23: Amid opposition charges, the Kerala government on Tuesday constituted a two-member committee to examine whether the privacy of personal and sensitive data of COVID-19 patients has been protected under the agreement entered by it with US-based IT firm Sprinklr.

The committee, headed by former Special IT Sscretary M Madhavan Nambiar and former health secretary Rajeev Sadanandan, will also ascertain whether adequate procedures were followed while finalising the arrangements with the private company.

The Opposition Congress has been levelling charges that the collection of data by the US firm violated the fundamental rights of the patients.

In its order, state government said it had initiated steps to set up a Data Analytics platform to integrate data from various sources available in the government to meet the "exigency of a massive and unprecedented surge of epidemic".

The committee will also examine whether deviations, if any, are fair, justified and reasonable considering the extraordinary and critical situation faced by the state, it said.

Meanwhile, the Kerala High Court on Tuesday asked the state government to file its reply by April 24 on a plea seeking to quash its contract with the US-based firm.

Expressing concern over the confidentiality of the citizen's data processed by a third party, the court sought to know why the sanction of the law department was not taken before finalising the agreement.

The court hailed the state government's fight against COVID-19, but said it is concerned about data confidentiality.

The government informed the court that the agreement with Sprinklr has safeguards for data protection "as per standard practices of software as a service model."

The ward-level committees, set up by the government for the anti-coronavirus fight, collect information of those under home isolation, the elderly and those at the risk of the disease, using a questionnaire and later uploads it on the server of the private agency.