UMANG portal flaws exposed user data across hundreds of services, researchers find
Security researchers have identified significant design flaws in India's UMANG government portal that exposed sensitive user data, including Aadhaar numbers and EPFO account details. While the Ministry of Electronics and Information Technology claims to have implemented fixes, independent experts argue the measures are inadequate and potentially introduce new security risks.
Why it matters
The vulnerabilities pose a major risk to millions of Indian citizens, potentially allowing cybercriminals to access personal identification and siphon funds from government-managed accounts.
Multiple vulnerabilities in the Unified Mobile Application for New-age Governance (UMANG), a government portal that aggregates hundreds of public services offered by the Union and State Governments, are leaving potentially millions of Indians’ data exposed across a variety of databases, including those from the Employees’ Provident Fund Organisation (EPFO), according to two security researchers who shared their findings with The Hindu .
The article reports on a security disclosure by citing multiple independent researchers and providing the government's official response, maintaining a neutral, fact-based journalistic tone.
Get smarter about the news
Sign up free for a feed built around what you actually care about, Dive Deeper research on any story, and the full text of every article.
Create free accountAlready have an account? Sign in