Tamil Nadu Police Facial Recognition Portal Data Breach
The Tamil Nadu Police Facial Recognition Portal data breach is connected to unauthorized access to a portal administrator account on May 3, 2024.
The organization has not published how many were affected, so the incident cannot be placed on this scale.
Exposed Data Types
1 sensitive8- Police records
- Names
- Phone numbers
- Physical addresses
- Ages
- Genders
- Family members' names
- Email addresses
About This Breach
Tamil Nadu Police confirmed that an administrator password had been compromised; the exact number of affected people was not disclosed.
Reports refer to approximately 1.2 million data lines, but that figure is not a count of unique people. Police said the backend server was not breached and that the compromised administrator account could view only limited front-end data.
How Did the Incident Occur?
An unauthorized person accessed an administrator account for the facial-recognition portal used by Tamil Nadu Police to search for criminals and missing people. The account was disabled, a complaint was filed with the Chennai Cyber Crime Police Station, and the organizations responsible for the portal's technology were informed.
What Information Was Involved?
Reviewed samples contained police personnel names and phone numbers together with fields such as FIR numbers, police stations, investigating officers, registration dates, case status, names, ages, genders, parent details, and addresses of people named in reports. Not every field should be assumed to have been exposed for every person.
What Are the Main Risks?
Real police-station names, officer details, or case information can make fraudulent payment calls, scams targeting relatives, and personalized phishing messages more convincing. People named in law-enforcement records may also face harassment and privacy risks.
What Should Affected People Do?
Verify unexpected calls or messages referring to a police case or officer through an independently located official channel, not a number supplied in the message. Do not provide money, passwords, one-time codes, or identity documents. Police personnel should review institutional account sessions and recovery details and replace any reused passwords.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
