In a significant security lapse, the SPARSH portal, a central platform managing pension processes for Indian defense personnel, including the Army, Navy, Air Force, and civilian staff, has encountered a massive data breach. The breach has exposed sensitive details of thousands of defense personnel, triggering concerns over privacy and security.
Developed by Tata Consultancy Services (TCS), the SPARSH portal’s breach revealed critical information like usernames, passwords, URLs, and Pension Numbers. This compromise severely risks the affected pensioners’ privacy and financial security.
Alarming developments have emerged as these credentials surfaced on Telegram and appeared on a Russian marketplace linked to malware known as ’lumma.’ The leaked data, priced at $9.00 for 0.41Mb, raises concerns about potential misuse and manipulation by hacker groups.
Of note, the exposed data primarily pertains to personnel in Kerala, broadening the breach’s scope internationally and raising worries about misuse possibilities. Following the breach, the Cyber Express team accessed the compromised data and gained unrestricted entry into the portal using the compromised credentials, underscoring the severity of the breach.
Implications of this breach are dire, affecting crucial functionalities within the SPARSH portal, such as Pensioner Profile Management, Pensioner Data Verification (PDV), Application Tracking, Pension Disbursement, and Life Certificate Submission.
This incident highlights the vulnerabilities in a system designed to streamline defense pension-related activities. The Cyber Express sought official statements from the Ministry of Defence and Tata Consultancy Services to clarify the security lapse. Users of the SPARSH portal are urged to change passwords promptly and stay vigilant.
