A private vendor previously employed by the ministry of defense may have walked away with the personal data of 50 lakh ex-servicemen.
ECHS was requested vide D/o ESW (Ex-servicemen welfare) aforesaid note dated 16.03.2018 for taking necessary action within three days on the issues raised by Commodore Batra (Retd).
However, after lapsing the three days’ time, action taken report/status on the above subject is still awaited from CO, ECHS.
ECHS cannot comment whether a copy of the same has been retained by the company or not.
Source: https://www.jantakareporter.com/india/personal-data-50-lakh-ex-servicemen-may-breached/177927/
TPRM report: https://scoringcyber.rankiteo.com/company/ministry-of-defence_india
"id": "min1939622",
"linkid": "ministry-of-defence_india",
"type": "Data Leak",
"date": "03/2018",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"{'affected_entities': [{'customers_affected': '50 lakh ex-servicemen',
'industry': 'Defense',
'name': 'Ministry of Defense',
'type': 'Government'}],
'attack_vector': 'Insider Threat',
'data_breach': {'number_of_records_exposed': '50 lakh',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': 'Personal Data'},
'date_detected': '2018-03-16',
'description': 'A private vendor previously employed by the ministry of '
'defense may have walked away with the personal data of 50 '
'lakh ex-servicemen.',
'impact': {'data_compromised': 'Personal Data', 'identity_theft_risk': 'High'},
'initial_access_broker': {'entry_point': 'Private Vendor'},
'investigation_status': 'Pending',
'references': [{'date_accessed': '2018-03-16', 'source': 'ECHS'}],
'threat_actor': 'Private Vendor',
'title': 'Potential Data Breach Involving Personal Data of Ex-Servicemen',
'type': 'Data Breach'}