Last week, IT Grids, a company hired by the Telugu desam party (TDP) to develop your Seva Mitra application, it was found that supposedly Data storage of 7.82 Indian crore. from Andhra Pradesh and Telangana, and another 2 million rupees from Punjab. A subsequent investigation found that the structure and size of the database maintained by IT Grids was similar to what was owned by the Unique Identification Authority of India (UIDAI). Indeed, it was another case of Aadhaar data breach.
Now that the investigation has progressed, it has been found that this stolen data was allegedly being used to try to expel voters from the electoral rolls, according to the report by Huffington Post. The publication spoke with IG Stephen Raveendra, who heads the Special Investigation Team (SIT) for this case. It also revealed that, when studying the origin of the data, they found that some parts could only come from the UIDAI database.
“We are forensically examining hard drives to track where the data is coming from. “But there are several columns of data that are an exact replica of the format used in the SRDH and the CIDR,” the publication says.
To put things in perspective, CIDR is the database that contains the demographic and biometric data of Aadhaar users. SRDH were state-level replicas of the CIDR belonging to that state, for the “ability to manage resident data.”
On April 12, UIDAI filed a complaint with the Madhapur police station citing the findings of the special investigative team (SIT) that discovered this data. The case was registered under sections 37, 38 (a), 38 (b), 38 (g), 40, 42, 44 of the Aadhaar Law 2016 and will be investigated by the SIT.
FIR 278/2019 by Cyberabad Police in Madhapur at the request of @UIDAI against IT Grids Pvt Ltd. First time in a #Aadhaar case there is a forensic investigation missing on all other UIDAI security claims. pic.twitter.com/8gDI3LmpRt
– Srinivas Kodali (@digitaldutta) April 15, 2019
The State Resident Data Centers (SRDH) have been a cause for concern since their inception. SRDH contains data from Aadhaar, including demographic and biometric data, as well as local data from other sources, such as KYR + from Kerala. And security experts have expressed that these data centers are vulnerable to attack.
UIDAI officials claim that Aadhaar’s core biometric data stored at the CIDR is never shared with anyone. The repeated answer was also repeated, that the biometric data has not been affected.
Police suspect that IT Grids may have illegally obtained this data from Aadhaar and misused it. The mere fact that this data was taken on a removable storage drive is in itself a violation of Aadhaar’s Law according to the police.
Tech2 is now on WhatsApp. For all the latest science and technology information, subscribe to our WhatsApp services. Just go to Tech2.com/Whatsapp and hit the Subscribe button.