Has Your Data Been Compromised?

'Check every SMS you get. Many people ignore them.'
'Remember if there is an activity in your account, your financial institution will send you an SMS, not a WhatsApp message.'

An alleged data breach involving 815 million Indians has surfaced on the Dark Web.

According to media reports, millions of Indians' Aadhaar and passport details, names, phone numbers, and temporary and permanent addresses have been stolen.

Says Ritesh Bhatia, cyber-crime investigator, cybersecurity, and data privacy consultant, "Investigations by several hacker groups show that the number could be much smaller -- a few lakhs. Nonetheless, it's important to take a few measures after this breach, besides being constantly vigilant."

Measures you should take

The first step you should take, according to Bhatia, is to lock your biometrics for additional security.

Your biometric data is stored securely in the Aadhaar system. Using the mAadhaar app, you can lock and unlock your biometrics at your convenience.

Says Bhatia, "You can also lock your biometrics from the www.uidai.gov.in website."

Know your status

By running a few checks, it is possible to learn if you are among those whose data has been compromised.

Says Ajay Setia, CEO, Invincible Ocean, a Metaverse platform, "Check for exposed data on sites like LeakPeek or DeHashed."

Safeguards against future attacks

Data breaches are becoming common. Take a few pre-emptive measures to protect yourself against future attacks.

First, ensure that your antivirus software is updated. Second, avoid clicking on links within text messages sent by unknown sources.

Says Setia, "Delete stored passwords from your systems. Also, update your passwords regularly, particularly for Internet banking and other crucial Web sites."

Your SMS inbox can also be a source of data breach. Clear it periodically of one-time passwords (OTPs) and other banking-related information.

Says Bhatia, "Check every SMS you get. Many people ignore them. Remember if there is an activity in your account, your financial institution will send you an SMS, not a WhatsApp message."

Be cautious about downloading apps. Some of them could access your messages and other information stored on your phone.

Says Setia, "Monitor your financial statements frequently for unauthorised transactions."

Check your credit report periodically for unexplained entries or inquiries you haven't made.

Know your rights

India guarantees data protection rights under its constitution and the Information Technology Act of 2000.

'Body corporates' face penalties for mishandling sensitive data. Courts recognise the right to claim damages for privacy violations.

However, the Act's strict definition of 'body corporate' raises concerns regarding whether it applies to specific government bodies.

Says Pratyush Miglani, managing partner, MVAC Advocates & Consultants, "The Digital Personal Data Protection (DPDP) Act further bolsters data protection, imposing penalties of up to Rs 250 crore for data breaches.

"Nevertheless, the DPDP Act allows for exemptions to entities engaged in research, archiving, and statistics.

"The government, too, has the power to exempt institutions from its applicability, raising questions about its application to public institutions."

Buy cyber insurance cover

Today, buying cyber insurance has become a must not just for corporates, but even for individuals.

In the event of a data breach, this cover provides an individual the following: Credit monitoring services, compensation for loss of wage while pursuing a resolution, and legal costs incurred on claiming damages from a third party for the data breach.

Says T A Ramalingam, chief technical officer, Bajaj Allianz General Insurance, "The cyber policy for individuals also covers financial loss arising from a cyber-attack, cost of data restoration and malware decontamination, and cost incurred on dealing with a cyber-extortion attempt.

"It also offers covers to smart devices that may have been affected."

Cyber insurance also offers protection against identity theft, cyberstalking, phishing, email spoofing, media liability claims, cyber extortion, and data breach by a third party.

The sum assured available can range from Rs 1 lakh to 1 crore.

Says Naval Goel, CEO and founder, PolicyX.com, "Currently, only three companies offer cyber insurance. Some of them provide worldwide coverage.

"Usually, these plans are targeted at individuals, but you can buy a top-up cover to protect your spouse, children, and other family members."

• MONEY TIPS

Feature Presentation: Ashish Narsale/Rediff.com