UIDAI denies security breach of Aadhaar data in registry attack

The Unique Identification Authority of India (UIDAI) has said there has been no security breach of its database or Central Identities Data Repository (CIDR), a day after it was reported that Aadhaar and about 6,000 other businesses and government entities were potentially breached.

UIDAI said in a statement today that the supposed incident related to the claimed breach of information from IRINN "does not contain any confidential data of UIDAI and has not affected any services provided by the Authority."

"As such these details are already present in the public domain and the information available on the Darknet doesn’t provide any sensitive or confidential information and has no “potential affect” as such vis a vis the UIDAI," it added.

UIDAI reiterated that its existing security controls and protocols are robust and capable of countering any such attempts or malicious designs of data breach or hacking. Security of Aadhaar is of critical importance to the Government and UIDAI has given it paramount significance.

"Accordingly, UIDAI constantly strengthens and reviews its infrastructure and ecosystems in line with the best international security practices and technological standards and have multi-layered security and privacy considerations built into the core strategy of Aadhaar with three basic doctrines of minimal information, optimal ignorance and federated database which give higher level of security.," UIDAI said in the statement.