SOCIAL INFRASTRUCTURE
Education Systems | Personal Data | Media & Journalism | Digital Influence Operations
Education Sector Breach Timeline
Pegasus/NSO Group Infections
Digital Influence Infrastructure
Personal Data Exposure by Category
Threat Assessment
Threat Assessment
Threat Assessment
Case Studies
CBSE Examination Data Leak 2018
India Central Board of Secondary Education
Hackers breached CBSE servers and sold 200,000 student records including Aadhaar numbers, PAN numbers, and contact details of students who appeared for 10th and 12th board examinations.
DIKSHA Platform Breach Jan 2023
National Digital Education Infrastructure
Security researcher discovered 37.9 million student and teacher records exposed via unprotected API endpoints on the government-run DIKSHA platform.
NTA JEE/NEET/CUET Breaches
National Testing Agency
Multiple breaches affecting India's premier entrance examinations. OROP data from 2021 leaks resurfaced in 2023. Students' data including results and personal information sold on dark web.
Pegasus Spyware Infections
NSO Group / Israeli Cyberweapons
Amnesty International and Forbidden Stories investigation confirmed 300+ Indian targets including journalists, activists, opposition politicians, and business leaders were infected with Pegasus spyware.
BJP G Cell Digital Operations
Bharatiya Janata Party Cyber Wing
Investigative reports revealed the BJP's dedicated social media operation with 100+ personnel running coordinated inauthentic behavior across platforms to manipulate public discourse.
Journalist Surveillance Network
State-Sponsored Hacking Collective
Multiple journalists including those investigating military matters, corruption, and human rights violations were targeted with spyware, phishing campaigns, and physical surveillance.
Key Findings
Aadhaar Data Aggregation Risk
Biometric data linked to Aadhaar creates permanent identity theft risk. Once compromised, cannot be reset like passwords.
Exam Data Systemic Vulnerability
Multiple NTA/CBSE breaches indicate systemic security failures. No unified security framework across education technology infrastructure.
Spyware Proliferation Unchecked
Pegasus and similar tools continue to operate despite曝光. No domestic surveillance oversight mechanism exists.
Digital Influence Infrastructure
State and party-affiliated influence operations operate with minimal transparency or accountability.
Journalist Protection Gap
Media workers lack legal protection against state surveillance. No source protection laws effectively enforced.
Data Broker Ecosystem
Dark web markets actively sell Indian citizen data. No comprehensive data protection enforcement.
CRITICAL ALERT: Systemic Personal Data Exposure
Over 2 billion Indian citizens have had their personal data compromised across various breaches. Aadhaar, exam data, and financial information are actively sold on dark web markets. The absence of a comprehensive data protection law leaves citizens with no legal recourse. Journalist surveillance through Pegasus represents an existential threat to democratic discourse. Immediate legislative action and institutional reform are required to protect citizen privacy and press freedom.