Cyber-attacks expose a state's vulnerabilities

Cyber-attacks on the government and significant business websites are as much a reality as physical insurgency and terrorist attacks.

- PAKHI GARG AND NACHIKETA MITTAL

The latest cyber ransomware attack in Uttarakhand on 2 October 2024 brought the State Government machinery virtually to a halt.

More than 90 major websites of the Uttarakhand Government, inter alia CM Helpline, 'Apni Sarkar', 'E-Office', 'E-Ravanna portal, Chardham registration, and Land Registry were compromised.

The Uttarakhand Government's data centre was hacked, crippling the State's entire Information Technology infrastructure. This attack, apparently, captured the State's Information Technology Development Agency (ITDA) server, holding the critical data of crores of people and sensitive government departments, including the office of the Chief Minister, and demanded a ransom. It was no less than paralysing the State Government.

One week later, on 10 October 2024, the Uttarakhand Government announced that there had been no data loss. However, several critical questions loom large.

Cyber experts view it from multiple lenses rather than as mere ransomware attacks or from the perspective of data recovery. The government's preparedness to combat such a massive cyberattack is under question and accountability is at stake.

The data of the last three years, curated by various State and non-State agencies further reflect a vulnerability of the Indian cyber system. For instance, till date in 2024, India has witnessed 388 data breaches, 107 data leaks, 39 ransomware activities, and 59 cases of access sales or leaks. We also sustained nearly 5 billion cyberattacks in 2023.