UMANG Portal Security Flaws Expose Sensitive User Data

Security researchers have identified critical flaws within the Unified Mobile Application for New-age Governance (UMANG) portal, leading to the exposure of sensitive user data across hundreds of services. The breached information includes Universal Account Numbers (UAN) linked to the Employees' Provident Fund Organisation (EPFO), booking details for LPG cylinders, and Aadhaar card information. These vulnerabilities raise alarms regarding the security architecture protecting India's major public digital infrastructure.

The findings reveal that user-specific details were left vulnerable across multiple services where sensitive government IDs were stored. The researchers indicated that these security loopholes could allow unauthorized access to personal data, potentially compromising the financial and personal identity information of numerous citizens. The incident highlights the persistent challenges in maintaining robust security standards for centralized government platforms that aggregate diverse services.

The exposure necessitates an urgent review of India's mobile governance ecosystem to prevent further leaks of personally identifiable information. Government agencies responsible for the UMANG portal must immediately address these structural flaws and implement enhanced encryption and access controls. For Indian citizens, this serves as a critical warning to monitor their linked accounts for unusual activity until the relevant departments provide official confirmation of the security fix.