ScarletGroup alleges massive breach of Rajasthan police email systems
A hacker collective calling itself ScarletGroup says it has accessed millions of emails from Rajasthan Police and is offering the data for sale, prompting a state cyber-crime investigation.
Self-identified hackers from ScarletGroup announced that they breached Rajasthan Police databases, accessing 5,926 mailboxes and 86.3 lakh emails, along with over 78.3 lakh unique addresses, identity records and mobile numbers. The claim extends to the state’s Department of Information Technology and Communication, where the group says it obtained more than a thousand mailboxes, VPN logins and certificates belonging to senior officials.
Cyber Crime DIG Shantanu Kumar said several teams, including the Cyber Commando and Incident Response units, are examining the allegations, though no specific vulnerability has been confirmed. The investigation has been escalated to the Indian Computer Emergency Response Team and the Indian Cyber Crime Coordination Centre for further analysis. Police across Rajasthan have been ordered to reset email passwords and update devices, while officials are in contact with the hackers via Telegram to verify the claims and discuss a possible payment that did not materialise. The Rajasthan Police website remained offline at the time of reporting.
Why it matters
A potential breach of law-enforcement communications could expose sensitive data and undermine public safety.
In this story
