Health Ministry yet to respond to massive CoWIN data breach

The Health Ministry is yet to respond to the massive CoWIN data breach which allows access to all personal details that an individual furnished on the Central Government’s portal in order to receive the vaccine.

The Health Ministry is yet to respond to the massive CoWIN (Covid Vaccine Intelligence Network), data breach which allows access to all personal details that an individual furnished on the Central Government’s portal in order to receive the vaccine.

What is more worrying is the fact that CoWIN — which serves the function of registration, appointment scheduling, identity verification, vaccination and certification of each vaccinated member — has also been integrated into the Aarogya Setu and UMANG Apps.

UMANG (Unified Mobile Application for New-age Governance) is developed by Ministry of Electronics and Information Technology (MeitY) and National e-Governance Division (NeGD) to drive mobile governance in India. UMANG provides a single platform for all Indian Citizens to access pan India e-Gov services ranging from Central to Local Government bodies.

Meanwhile, the current data breach is possible if the mobile number of a person is entered — details such as the identification number of the document submitted for vaccination (Aadhaar, passport, PAN card and so forth), gender, date of birth, and the centre where the vaccine was administered, are provided as reply in an instant by the messenger bot in question.

These details could be accessed even if the Aadhaar number was entered instead of the phone number. The passport numbers of those who had updated the CoWIN portal for travel abroad were also leaked.

Details, now available in the public domain, include that of Ram Sewak Sarma, chairman of CoWIN high-power panel (the leak gives information on the ID papers submitted for vaccination), senior BJP leader Meenakshi Lekhi and Congress general secretary K.C. Venugopal (location at which they got vaccinated), the mode of registration for Kerala Health Minister Veena George.

The telegram bot (a programme that behaves like a normal chat partner with additional functions) — is also giving details of individuals and several Opposition leaders’ data including — Rajya Sabha MP and TMC Leader Derek O’Brien, former Union Minister P. Chidambaram, Congress leaders Jairam Ramesh, Deputy Chairman Rajya Sabha Haribansh Narayan Singh, Rajya Sabha MPs Sushmita Dev, Abhishek Manu Singhvi, and Sanjay Raut, among others.