Rajasthan Government Data Breach Claim: 8.63 Million Emails Reportedly Exposed

A new cybersecurity allegation involving Rajasthan’s Department of Information Technology & Communication (DoIT&C) has raised concerns about the safety of government data in India.

According to reports, a threat actor is allegedly offering a large dataset linked to the department for sale. The claimed collection contains millions of emails, personal information and potentially sensitive access-related records. However, the authenticity and full extent of the alleged breach have not been independently confirmed.

What Does the Alleged Data Leak Include?

According to the reported figures, the dataset contains:

• 5,926 mailboxes containing approximately 8.63 million emails.
• 22,686 email attachments with a combined size of 6.63 GB.
• 783,495 unique email addresses.
• 70,301 identity records.
• 59,460 mobile numbers.
• 69 reportedly verified credentials.
• 21 VPN logins and 64 VPN certificates.
• 1,065 mailboxes reportedly belonging to senior officers.

The reported data may include government communications, financial records, KYC documents and internal access information.

These figures represent claims made about the dataset, not independently verified counts of affected individuals or confirmed compromised accounts.

Why Is This Allegation Concerning?

Government email accounts often contain more than routine messages. They may include official correspondence, administrative decisions, financial discussions, internal documents and information exchanged with other departments.

If such information falls into the wrong hands, it could be misused for phishing, identity fraud, impersonation and other cybercrime activities.

The alleged exposure of VPN credentials and certificates is another concern. If any of these are valid and remain active, attackers could potentially attempt to gain unauthorized access to connected systems. Their actual validity and usability remain unknown.

What Could Happen If the Data Is Sold?

The threat actor reportedly intends to sell the dataset to multiple buyers. If that claim is accurate, the same information could circulate among different individuals or criminal groups.

Possible risks include targeted phishing emails, fraudulent requests made in the names of government officials, misuse of identity documents and attempts to access accounts using leaked credentials.

Attackers can make fraudulent messages more convincing when they possess genuine names, email addresses and details from previous conversations.

However, these are potential consequences of the alleged exposure, not confirmation that such attacks have already taken place.

Has the Rajasthan Government Confirmed the Breach?

The key question is whether the dataset is genuine and whether it was obtained through unauthorized access to government systems.

The reported figures alone cannot establish the source of the data, the method of access or the number of people affected. The dataset could contain genuine stolen information, previously leaked records, duplicate material or a combination of different sources.

An official investigation would need to examine the records, timestamps, email headers, system logs and other technical evidence before drawing firm conclusions.

Until reliable confirmation becomes available, the incident should be described as an alleged data breach rather than a fully confirmed compromise of the stated scale.

How Can Government Employees and Citizens Stay Safe?

People who may be affected should take basic precautions:

• Change passwords that may have been exposed, particularly if they have been reused elsewhere.
• Enable multi-factor authentication wherever possible.
• Never share OTPs or approve unexpected login requests.
• Be cautious of emails requesting payments, confidential documents or urgent account verification.
• Monitor important accounts for suspicious activity.
• Report suspicious messages or account activity through official security channels.

Government departments should investigate potentially affected accounts, review VPN access, revoke compromised credentials where necessary and preserve relevant logs for forensic analysis.

In India, suspected cybercrime can be reported through the National Cyber Crime Reporting Portal. Government organizations should also follow applicable CERT-In incident-reporting requirements.

Final Thoughts

This allegation highlights an important cybersecurity lesson: protecting data is not only about preventing hackers from entering a system. It is also about securing user accounts, monitoring suspicious activity, protecting backups and responding quickly when information may have been exposed.

The reported scale of the Rajasthan dataset makes the allegation worth taking seriously. At the same time, the facts must be verified before conclusions are drawn about the breach, its source or its impact.

Until further confirmation, the most responsible approach is to remain alert, protect sensitive information and rely on credible updates rather than unverified claims.

Sources

1. Rajasthan DoIT&C - Cyber Security Advisories
2. CERT-In -  Official Cybersecurity Directions
3. Moneycontrol reporting syndicated by TradingView

Note: The sources above provide reporting and official cybersecurity resources. They should not be interpreted as official confirmation of every claim in the alleged dataset.

Follow us on X , Facebook