Indian state government fixes website bugs that exposed residents’ sensitive documents

A security researcher found flaws in Rajasthan’s Jan Aadhaar portal that allowed access to sensitive personal documents and information (Aadhaar copies, birth/marriage certificates, bills, income statements and personal details) for registrants—one flaw exposed data via a registrant's phone number and another was due to improper OTP validation; the issues were reported and later fixed by CERT-In. The portal serves ~78 million individuals and ~20 million families, indicating a potentially very large exposure though there is no public evidence of active exploitation.