Here’s what cyber-security experts have to say on CoWIN data breach

A day after an alleged data breach on Co-WIN portal was reported, analysts say that the hackers do not have access to the entire CoWIN portal nor to the backend database.

The hacker was sharing personal information such as mobile numbers, and Aadhar numbers of those who have registered themselves on the CoWIN portal for their vaccinations.

CloudSEK, a cyber-security company, discovered a threat actor advertising a Telegram bot that offered personally identifiable information (PII) data of Indian citizens.”It is believed that the threat actors have obtained multiple credentials belonging to health workers, which they could have used to access the CoWIN portal and its associated data,” according to researchers.