Rajasthan Police Data Breach Claim: Group Lists 70,000 Records
Image: Business Today
A hacker group calling itself Scarlettgroup claims it has broken into the Rajasthan Police website and database, and is offering about 70,000 identity records and 59,460 mobile numbers for sale on BreachForums, a dark web forum. The claim surfaced on Wednesday, 21 October, after the cybersecurity account FalconFeedsio flagged it on X. Neither the Rajasthan Police nor any government agency has confirmed a breach, and the claim remains unverified.
FIRs, eKYC Files and Witness Statements Listed
According to Business Today, the group says the data includes First Information Reports, eKYC documents and witness statements, along with emails it says belong to the director, the inspector general and other officers. It also lists about 6.63 GB of attachments, which it says contain investigation bundles, pay slips, identity cards, bank statements, scanned reports and circulars.
The group posted redacted sample images and says unredacted copies will go to buyers after private deals. It has not named a price and says the data is open to more than one buyer. “We have breached Rajasthan Police, and its data is now available for purchase,” the post reads, as quoted by Business Today.
No Word Yet From the Police
When the reports were published, the Rajasthan Police had not commented, or said whether it had begun an audit of its servers. Business Today said the authenticity, attribution and full extent of the claimed breach remain unverified, and it is not clear whether the material came from the police website at all. The420.in noted that forum posts and sample images do not prove an intrusion, because old or third-party data is sometimes passed off as a new leak.
Complainants and Witnesses Would Bear the Risk
If the material is genuine, the people most exposed would be those named in police files, such as complainants, witnesses and people who completed eKYC. Fraudsters often call people while posing as police officers, and real case details would make such calls more convincing. Anyone who gets a call quoting an FIR or a case number and asking for money or documents should hang up and check directly with the police station.
The claim comes a day after State Bank of India told the stock exchanges that 3,897 customer records were found on the dark web. The420.in reported that officials see no link between the two incidents. IPB will update this story if the Rajasthan Police or CERT-In responds. More reports are in Daily Updates.
Based on reporting by Business Today and The420.in.
Image: Business Today.
