The Andhra Pradesh government has been leaking the personal data of more than 23,000 farmers who have received subsidies from the Andhra Pradesh Medicinal and Aromatic Plants Board.
The portal has been leaking farmers' phone numbers, Aadhaar numbers, father's names, passbook and bank account numbers, and the district and mandal where they live.
All this information by entering their phone number in the database.
Source: https://www.medianama.com/2018/07/223-andhra-pradesh-website-is-leaking-detailed-data-of-farmers/
TPRM report: https://scoringcyber.rankiteo.com/company/goap
"id": "gov2338101122",
"linkid": "goap",
"type": "Data Leak",
"date": "07/2018",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 23000,
'industry': 'Agriculture',
'location': 'Andhra Pradesh, India',
'name': 'Andhra Pradesh Medicinal and Aromatic Plants '
'Board',
'type': 'Government Agency'}],
'attack_vector': 'Improper Data Access Controls',
'data_breach': {'number_of_records_exposed': 23000,
'personally_identifiable_information': ['Aadhaar numbers',
"Father's names",
'District and mandal'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Phone numbers',
'Aadhaar numbers',
"Father's names",
'Passbook and bank account '
'numbers',
'District and mandal']},
'description': 'The Andhra Pradesh government has been leaking the personal '
'data of more than 23,000 farmers who have received subsidies '
'from the Andhra Pradesh Medicinal and Aromatic Plants Board.',
'impact': {'data_compromised': ['Phone numbers',
'Aadhaar numbers',
"Father's names",
'Passbook and bank account numbers',
'District and mandal']},
'title': 'Andhra Pradesh Government Data Leak',
'type': 'Data Leak',
'vulnerability_exploited': 'Unsecured Database'}