A hacker group identifying itself as “ScarletGroup” has claimed to have breached Rajasthan Police databases and offered sensitive information for sale on the darknet, prompting an investigation by state cyber teams.
The attackers shared documents purported to be copies of first information reports (FIRs) and call detail records (CDRs). They also claimed to possess electronic Know Your Customer (e-KYC) records, witness statements and confidential information from senior police officers’ official email accounts. The authenticity and source of the material remain under investigation. “We received input that the Scarlet Group had stolen important data from several departments, including Rajasthan Police. Our Cyber Commando Team and Incident Response Team have begun working on this. The matter has also been referred to the Indian Computer Emergency Response Team (CERT-In). Investigators are examining whether police servers or networks were compromised and how the group obtained the documents it circulated.
In a post circulated on social media, the group claimed to have accessed 5,926 mailboxes, 86.3 lakh emails, more than 78.3 lakh unique email addresses, 70,301 identity records and 59,460 mobile numbers allegedly linked to Rajasthan Police.
Police said they had not yet determined whether their systems were compromised. The Rajasthan Cyber Security Operations Centre of the state DoIT has also begun working,” Kumar said. He said no vulnerability had been identified so far, but police were neither confirming nor dismissing the alleged breach. The Indian Cyber Crime Coordination Centre (I4C) is assisting in gathering information about the alleged leak, according to police.
