Imagine your phone number, Aadhaar details, address, and even medical records popping up on a stranger’s screen with just a single tap. This is not a scene from a movie; it is the new, alarming reality of “One Click Data Leaks” in India.
Recent investigations and cybersecurity reports have revealed a dangerous trend where massive amounts of sensitive Indian citizen data are being made available via simple Telegram bots and dark web portals. Unlike complex hacks of the past, these new leaks allow anyone—even without technical skills—to access private information instantly.
What is the “One Click Data Leak”?
The term “One Click Data Leak” refers to the terrifying ease with which cybercriminals and even common users can now access stolen databases.
In the past, accessing stolen data required navigating the “Dark Web” with special browsers. Now, hackers have automated this process. They upload millions of stolen records (from telecom operators, government portals, or insurance companies) to chatbots on platforms like Telegram.
A buyer simply enters a phone number or name into the bot, clicks “Search,” and within seconds, the bot replies with the victim’s:
- Full Name and Address
- Aadhaar Number and PAN Card details
- Mobile Network information
- Sometimes even family details or medical history.
Recent Incidents Shaking India
This “One Click” phenomenon has been highlighted by several major recent breaches in India:
- The Telegram Bot Leaks: In a widely reported incident, a Telegram bot was found allowing users to fetch details of Indian citizens just by entering a phone number. This included data allegedly from the CoWin portal and other government databases.
- Star Health Insurance Case: Recently, a hacker used Telegram bots to leak the medical claims and personal data of millions of Star Health Insurance customers. The hacker claimed to have “one click” access to sensitive medical reports, demanding a ransom.
- The 75 Crore Telecom Database: Reports from cybersecurity firm CloudSEK highlighted that data of nearly 75 crore Indians (almost 85% of the population) was being sold online. This data is often fed into “One Click” search tools used by scammers.
Why Is This Dangerous?
The biggest risk is that cybercrime has become easy. You no longer need to be a “hacker” to steal identity.
- Financial Fraud: Scammers use the leaked info to trick people. If a scammer knows your exact address and last transaction, you are more likely to believe them.
- Identity Theft: With Aadhaar and PAN details available in “one click,” criminals can take loans or buy SIM cards in your name.
- Privacy Nightmare: Stalkers and harassers can easily find personal addresses and family details of victims.
How Did This Happen?
Experts point to a few key reasons for this surge:
- Third-Party Weaknesses: While government servers are often secure, third-party vendors (like SMS agencies or healthcare partners) often have weaker security. Hackers target them to steal data.
- API Vulnerabilities: Many apps use “APIs” to share data. If these are not locked down, hackers can pull data in bulk.
- Lack of Encryption: In some cases, older databases stored data in plain text, making it readable immediately after a theft.
Official Action: What is the Govt Doing?
The Indian government and agencies have taken serious note of these “One Click” threats:
- Notices to Telegram: The IT Ministry has issued strict notices to platforms like Telegram to ban such bots immediately.
- CERT-In Investigation: India’s cyber security agency, CERT-In, is actively investigating these breaches and plugging loopholes.
- New Data Protection Law: Under the Digital Personal Data Protection (DPDP) Act, companies can now face massive fines (up to ₹250 crore) if they fail to protect user data.
Read More : Does Your Phone Listen to You?
FAQ: Protecting Yourself from Data Leaks
Q: How do I know if my data is leaked?
A: It is hard to know for sure, but if you receive a lot of spam calls or suspicious messages addressing you by name, your number might be in a leaked database.
Q: Can I remove my data from these bots?
A: You cannot delete it yourself. However, you should report such bots to the platform (like Telegram) and file a complaint on the National Cyber Crime Portal (cybercrime.gov.in).
Q: What should I do to stay safe?
Lock your Biometrics: Go to the mAadhaar app or UIDAI website and “Lock” your biometrics so no one can misuse your fingerprints.
Enable Two-Factor Authentication (2FA): Always use OTPs or authenticator apps for your emails and bank accounts.
Ignore Unknown Links: Never click on SMS links claiming your “account is blocked” or “KYC pending.”
Q: Will the hackers be caught?
A: Indian police have made several arrests recently, including gangs in Cyberabad and Delhi who were selling this data. The crackdown is intensifying.
