EPFO pension scheme holders’ data exposed online, claims security researcher

New Delhi, Aug 4: A Ukraine-based cybersecurity researcher and journalist has claimed that about 288 million personal records, containing the full name, bank account number and nominee information of the Employees’ Pension Scheme (EPS) holders in the Employees’ Provident Fund Organisation (EPFO), were exposed online before being taken off the Internet.

The security researcher’s claim about the data exposed online was yet to be verified by the EPFO, national cyber agency CERT-In or the IT Ministry.

Bob Diachenko, cyber threat intelligence director and journalist at SecurityDiscovery.com, claimed that their systems identified two separate IPs with Universal Account Number (UAN) data.