Threat Intelligence Brief
Curated summary with source attribution
Source: thehindu.com
Threat Risk: Medium
Victim: Central Board of Film Certification (CBFC)
Incident: Unauthorized access to the e-Cinepramaan portal leading to a data leak on the Internet Archive.
Impact: Exposure of commercially sensitive distribution agreements, licensing fees, and shooting scripts.
Attacker: Unidentified threat actor
Analysis: The breach originated from the e-Cinepramaan portal, with data subsequently hosted on the Internet Archive by an actor using a Russian display name. While the CBFC initially contested the findings, the leak included commercially sensitive distribution agreements and internal documents for over 500 titles. The incident highlights critical vulnerabilities in the portal’s access controls and a lack of proactive data monitoring.
Recommendations: Conduct a comprehensive security audit of all public-facing government portals; Implement strict access control and activity monitoring for sensitive document repositories; Regularly monitor public leak sites and archives for organization-specific data
Source: The Hindu
Editorial note: this post summarizes third-party reporting and links to the original source.
View Original Source