Jharkhand government portal leaking users' identity data: French researcher

Famous French security researcher, who goes by the name of Elliot Alderson, claimed on Wednesday that identity data of nearly 9,000 people who logged into the Jharkhand government's portal is available in the open.

In a series of tweets from his handle @fs0c131y, Alderson said the website is leaking identity documents which are available in the public domain.

"Your website is leaking almost 9,000 identity documents. Can you contact me?" the French vigilante hacker tweeted to @ITDept_JH.

"The valid credentials, userid as username and password as password, are hardcoded in the login page," he added.

In an earlier tweet addressed to @MPOnlineLimited, Alderson said: "Your website is leaking more than 52 000 identity documents".

There was no reply from the IT department of Jharkhand government to the researcher's tweets.

The French security researcher has earlier exposed security lapses in Aadhaar, Patanjali's Kimbho app and others.

--IANS

na/bg