EPFO Data Reportedly Stolen by means of Its Aadhaar Seeding Service, EPFO Denies Reports

EPFO Data : Representatives Provident Fund Organization (EPFO) information has allegedly been stolen by programmers, as indicated by a spilled letter sent by Dr. V. P. Bliss, the Central Provident Fund Commissioner, to the Dinesh Tyagi, CEO of the Common Service Center (CSC) at the Ministry of Electronics and Information Technology (MeitY) that was shared by two Twitter clients. The spilled letter expresses the information burglary exploited vulnerabilities on the aadhaar.epfoservices.com site, which is the Aadhaar Seeding Service for the EPFO and conveyed on servers of the EPFO’s National Data Center. A different public statement by EPFO seems to deny any information robbery, calling the conclusion of servers a normal exercise.

The spilled letter was sent by Dr. V. P. Bliss on March 23, as found in the tweets shared by @raydeep and @arvindgunasekar. The letter claims Dr. V. P. Delight was implied by the Intelligence Bureau, which indicated the aadhaar.epfoservices.com vulnerabilities were of two structures – swagger helplessness and indirect access shells. The IB additionally said that while the site is sent on the EPFO’s National Data Center servers, the application on the server is remotely overseen by the Common Service Center (CSC) group. The tweets were first featured by Latestly.

Dr. V. P. Euphoria likewise notes in the spilled letter that till the aadhaar.epfoservices.com vulnerabilities – recognized by IB and also any others found by the MeitY group – are stopped, EPFO will stop the servers and any facilitated administrations. It is questionable what has occurred in the meantime.

The spilled letter likewise takes note of that the IB has suggested that the EPFO take after “prescribed procedures and rules for securing classified information, re-underscoring general and important review and weakness appraisal and entrance testing (VAPT) of the whole framework from skillful examiners and analyzers.”

Independently, a public statement issued by the EPFO on Tuesday claims reports refering to the spilled letter are false. Seeming to affirm the presence of the letter from Dr. V. P. Happiness to Tyagi, the public statement guarantees the notices with respect to vulnerabilities were a “routine regulatory process” in light of which EPFO administrations rendered through the CSC were stopped.

“No affirmed information spillage has been built up or watched up until now. As a major aspect of the information security and insurance, EPFO has made propel move by shutting the server and host benefit through Common Service Centers pending defenselessness checks,” the announcement stated, including, “EPFO has been playing it safe and measures to guarantee that no information spillage happens and will keep on being watchful about it later on.

(This Story Originating From NDTV)