Vehicle portal data exposure prompts security audit
Quick dive
- MoRTH asked CERT-In to conduct a forensic security audit of VAHAN, SARATHI, e-Challan and PUCC portals after vehicle data was reportedly sold online.
- The systems hold registration, driving-licence, challan, FASTag and pollution-certificate information, including names, addresses, mobile numbers and vehicle-linked records.
- An RTI cited 25,314 credentials issued to private entities and 1.708 crore queries run over 33 months through access to the National Transport Repository.
- The ministry requested app stores to remove applications such as VehicleSetu that allegedly exposed detailed vehicle information, while reviewing data-sharing policy with MeitY.
- exam_relevance: tests CERT-In, data fiduciary access, minimisation and the DPDP Act through a concrete national database case; UPSC increasingly asks privacy, cyber resilience and state-data governance.
Full explanation
This explanation is available with full current-affairs access.
Log in to continue