🇮🇳 India – “28 Million” Education Portal Data Leak Claim
A threat actor is claiming to possess a massive dataset tied to Indian academic/student records, allegedly containing 28 million entries.
📊 Claimed data includes:
• Student names
• Parent names & emails
• Mobile numbers
• School names
• Addresses / city / state
• Usernames
• Subjects / codes
• Hashed passwords
• ⚠️ Alleged plaintext passwords
Format:
• XLSX spreadsheets
• Claimed size: 28 million rows
Initial assessment:
• Dataset appears focused on:
→ Education / trainee ecosystem
→ Student-parent relationship data
• Presence of:
• Parent contact info
• School-level metadata
→ Suggests centralized educational platform exposure or aggregation
⚠️ Risk perspective:
If authentic, this is a critical child/student privacy incident
Potential impacts:
• Child-targeted phishing
• Parent impersonation scams
• Credential reuse attacks
• Long-term identity abuse
🚩 Major concerns:
• Claimed plaintext passwords dramatically increase severity
• XLSX format for 28M records is unusual:
→ Could indicate split datasets or converted exports
• No clear attribution to a verified platform yet
🧠 Analyst note:
The scale is plausible for a nationwide education ecosystem, but:
• Threat actors often inflate record counts
• Need validation through:
• Sample consistency
• Duplicate analysis
• Real platform attribution
Still, the combination of:
• minors’ data
• parent data
• credentials
makes this potentially one of the more sensitive leaks circulating.
Status: Unverified – High potential impact if confirmed
#DDW #Intelligence #DataBreach #CyberThreat #OSINT