The Indian Center for Internet and Society (CIS) reported a leak of 135 million AADHAAR numbers and related information.

AADHAAR is a unique personal number of 12 digits assigned to every resident of India within the system of identification of citizens and residents of UIDAI. Identification is carried out on the basis of personal data, images of the iris and fingerprints. In particular, AADHAAR is used to authenticate and authorize money transfers.

Leakage is not directly related to AADHAAR.

It seems that the incident occurred through the fault of several government agencies collecting identification numbers and related information for their own purposes. According to the CIS, 135 million leaked records are associated with 100 million bank accounts. Since AADHAAR is used to make payments, the leak is a real nightmare.

In connection with the incident, the Ministry of Electronics and Information Technology of India intends to adopt a number of amendments to the legislation regulating the IT sphere designed to strengthen the protection of the identification system.