Rajasthan Police allegedly hacked, 70,000 identity records and 59,460 mobile numbers claimed to be up for sale

A hacker group has claimed responsibility for a cyberattack on the Rajasthan Police, alleging that it gained access to thousands of identity records, mobile numbers and sensitive police documents. The group says the data is now available for sale, though the claim has not been independently verified.

The alleged breach was first reported on X by cybersecurity account FalconFeedsio. According to the post, a hacker group called “Scarlettgroup” is behind the incident. Scarlettgroup has also shared details about the incident on BreachForums, a dark web forum.

“We have breached Rajasthan Police, and its data is now available for purchase,” Scarlettgroup said on the forum.

The hackers claim that they have access to around 70,000 identity records and 59,460 mobile numbers. The group also says it obtained details about FIRs, eKYCs and witness statements.

The Rajasthan Police has not commented on the claims at the time of writing. India Today cannot independently confirm the authenticity of the breach.

Don't Miss: Blinkit targets 5,000 stores by March 2028: Can smaller cities drive quick-commerce growth?

What data do the hackers claim to have?

The hackers claim that they have emails belonging to the director, inspector general and others. They also claim that the data includes attachments totalling 6.63 GB.

According to Scarlettgroup, the attachments contain eKYC documents, FIRs, investigation bundles, pay slips, identity cards, bank statements, scanned reports and circulars.

Scarlettgroup has shared redacted images of sample documents from the data set. The group says unredacted versions would be provided upon purchase. No price was given for the sale, though the group claims it will sell the data to multiple buyers.

Must Read: 3.75 lakh records, 3,897 customers: SBI says address, mobile numbers, email ID leaked in data breach

Rajasthan Police data leak remains unverified

The authenticity, attribution and full extent of the claimed breach remain unverified.

It is not yet clear whether the data is genuine or whether it came directly from the Rajasthan Police website. If genuine, it could be used for identity theft and cyberfraud.

Earlier today, the State Bank of India confirmed a data breach that compromised the data of nearly 3,900 customers.

While SBI did not name the group behind the attack, a group called “Siriusim” had claimed to have hacked the bank on BreachForums.