The Telangana police recently experienced a data breach with their TSCOP app, following a previous breach with the HawkEye app. Personal information of TS police officers was compromised in this latest breach.
Reports indicate that police-related data is being sold online, with the same hacker from the HawkEye breach allegedly behind this incident. The TSCOP app user data is being sold for $120 online. Data security researcher Srinivas Kodali stated that the hacker was able to access the entire Telangana COPs network, including TSCOP, due to plain text passwords embedded in the app.
Within a week, Telangana police faced three major data leaks attributed to the same hacker: the TSCOP app data leak, the Telangana police SMS service portal breach, and the HawkEye app data leak.
The TSCOP app allows police officers to access crime and criminal databases, featuring a facial recognition system for identifying criminals and missing individuals. The hacker has posted sample data online, showcasing offender records, police gun licenses, and other law enforcement information.
User information, including officer names, police station affiliations, and images, is now available for purchase online. Kodali advised Telangana police to use more secure passwords and HTTPS for better protection.
The TSCOP app was launched in 2018 for internal use by Telangana police to aid in crime-solving. It was recognized by the National Crime Records Bureau in 2017 for empowering police with information technology.
The HawkEye app, launched in 2014 by Telangana police, allows the public to report violations and crimes against women. Following the data breach involving this app, a case has been registered and is under investigation by Telangana CID.
One leaked data sample included a complaint filed by a woman on the HawkEye app, detailing threats made against her and her family. Her personal details were exposed in the data leak.
