A thread on all the #Aadhaar data leaks from Andhra Pradesh. The first leak I reported about AP was part of my report on why leaks are happening. The AP government published details of 2 crore residents Aadhaar, bank account numbers, phone numbers as MS Access databases online Another one part of the same report was AP NREGA website publishing details of another 1,12,99,803 residents #Aadhaar numbers and bank account details.

Next Talk: Weaponising Data For Politics by @ShivamShankarS #FifthEl Political Parties have invested al-teast $0.5 billion on data campaigns in India #FifthEl

Reported a security issue of #Aadhaar demographic authentication API without any access restriction & was on unsecured protocols. This allows third parties to access APIs without being a AuA. Similar security issue has been previously reported. hackernoon.com/abusing-aadhaa… If you saw demographic authentications for your #Aadhaar on UIDAI portal, but you haven't done it. It's likely a third party who is trying to verify your details. As demographic authentication does not require any permission from the Aadhaar holder

It has always been said #Aadhaar is being linked to religion and caste information, apart from occupation. While UIDAI is not doing it, other government departments are. Here is proof that UIDAI has no idea what all is being linked to your unique id. Website reported early today. It's a live public website yet to be closed down. Reported it to multiple agencies. More details later.