Breaches and incidents

Telangana TG-iPASS (India): suspected ransomware encrypts industrial approvals portal database

Per Telangana Today, the TG-iPASS portal has been disrupted since 22 Oct after a suspected ransomware attack.

Disclosed
Verification
Reported by a reputable outlet, citing the company

What happened

  • Per Telangana Today, the TG-iPASS portal has been disrupted since 22 Oct after a suspected ransomware attack; officials found the database encrypted with file names altered to a “vgb” extension, and processing of industrial permissions was affected.
  • Root cause: not disclosed; forensic examination of the server is underway to determine whether data was stolen.
  • No attacker named; a ransom note reportedly gave only an email address and no money demand.
  • The Telangana Cyber Security Bureau registered a case under Sections 43 and 66 of the IT Act; Industries Department officials said backups were available and restoration had begun. The 28,000-business figure in the lead was not in the source fetched.