2018 Aadhaar — 1B+ records exposed, multiple leaks

2018 1.1B records affected

Data compromised

Names, bank details, biometric, demographic data

Technical writeup

Aadhaar database exposed via WhatsApp sellers, 100K+ ex-employees with access, Indane unprotected API, 200+ govt websites. 130M+ records through govt sites. WEF deemed it largest breach globally.

Root cause

Unprotected API; excessive access; govt website exposure

References

https://en.wikipedia.org/wiki/Data_breaches_in_India
https://techcrunch.com/2018/01/04/indias-national-id-database-is-reportedly-accessible-for-less-than-10/