National News

India 6th on breached users' global list; new CERT-In directive can worsen situation

At least 18 out of every 100 Indians have been affected by data breaches since 2004, making India sixth in the world by the number of breached users, a new report

Sentinel Digital Desk

NEW DELHI: At least 18 out of every 100 Indians have been affected by data breaches since 2004, making India sixth in the world by the number of breached users, a new report revealed on Monday.

As of June 1, India's breach rate was 740 per cent higher than the first quarter (Q1) this year, rising from five to 42 breached accounts per minute.

Indian users' data may become increasingly endangered as the new directive from the Indian Computer Emergency Response Team (CERT-In) calls companies to extensive data collection within Indian jurisdiction, putting even more of users' data at risk to be breached, according to cybersecurity company Surfshark.

"Since 2004, 14.9 billion accounts have been leaked, and a striking 254.9 million of them belong to users from India. This makes India sixth in the world by the number of breached users," the report mentioned.

A striking 962.7 million Indian data points have been leaked so far, most of them passwords, names and telephone numbers.

The new CERT-In directive orders to store and hand-over larger amounts of customers' personal data upon request.

"Taking such radical action that highly impacts the privacy of millions of people living in India will most likely be counterproductive and strongly damage the sector's growth in the country," said Gytis Malinauskas, Legal Head at Surfshark.

Ultimately, "collecting excessive amounts of data within Indian jurisdiction without robust protection mechanisms could lead to even more breaches nationwide," Malinauskas added.

Lack of privacy legislation puts India's users' data in danger of being sold, reused or exploited in offenses. Over the last decade, the government has introduced several digital-surveillance measures. On April 28, it directed a number of companies to collect and store users' data — names, addresses, contact numbers, email, and IP. (IANS)

Also Watch: PM Modi inaugurated 7 state-of-the-Art-Cancer-Centres