VULNpocalypse
Breaches and incidents

Rajasthan Police (India): ScarlettGroup claims police and state IT data, police and CERT-In investigating

Business Today (21 Oct) reported that a group calling itself ScarlettGroup posted on BreachForums (first flagged by FalconFeeds) that “We have breached...

Disclosed
Verification
Confirmed by two or more outlets

What happened

  • Business Today (21 Oct) reported that a group calling itself ScarlettGroup posted on BreachForums (first flagged by FalconFeeds) that “We have breached Rajasthan Police”, claiming about 70,000 identity records, 59,460 mobile numbers and 6.63 GB of attachments (eKYC documents, FIRs, pay slips, ID cards, bank statements). By 23 Oct the claim grew to 5,926 mailboxes and 8.63 million emails, including 1,065 mailboxes of the Department of IT and Communication (DoIT&C), 69 login credentials, 21 VPN logins and 64 VPN certificates (Free Press Journal). These are attacker claims, not confirmed.
  • Root cause: not disclosed. The claimed VPN credentials and certificates suggest, but do not prove, remote-access compromise.
  • Attacker: ScarlettGroup (self-claimed).
  • Response: Cyber DIG Shantanu Kumar said the matter was reported to CERT-In; Rajasthan Police cyber teams and DoIT&C opened a probe with the state Cyber Security Operations Centre and I4C assisting; police personnel statewide were told to change official email passwords and update laptops and phones. Police have not confirmed that systems were compromised.

Sources