# 7.26 million records of BHIM users data leaked | Tech News (HT Tech)

> The volume of exposed data which was first discovered by the security researchers on April 23 amounted to 409GB.

# 7.26 million records of BHIM users data leaked

## The volume of exposed data which was first discovered by the security researchers on April 23 amounted to 409GB.

Aug 20 2022, 21:10 IST

![Follow on Facebook](https://images.hindustantimes.com/tech/static/revamp/images/png/follow-us-facebook.png)

![Follow on Facebook](https://images.hindustantimes.com/tech/static/revamp/images/png/follow-us-facebook-hover.png)

![Share](https://images.hindustantimes.com/tech/static/revamp/images/png/Share.png)

![Share](https://images.hindustantimes.com/tech/static/revamp/images/png/Shareclicked.png)

![Share on WhatsApp](https://images.hindustantimes.com/tech/static/revamp/images/png/whatsapp.png)

![Share on WhatsApp](https://images.hindustantimes.com/tech/static/revamp/images/png/whatsapp-hover.png)

![Share on Twitter](https://images.hindustantimes.com/tech/static/revamp/images/png/twitter.png)

![Share on Twitter](https://images.hindustantimes.com/tech/static/revamp/images/png/twitter-hover.png)

![Share on Facebook](https://images.hindustantimes.com/tech/static/revamp/images/png/facebook.png)

![Share on Facebook](https://images.hindustantimes.com/tech/static/revamp/images/png/facebook-hover.png)

![Bookmark](https://images.hindustantimes.com/tech/static/revamp/images/png/Bookmark.png)

![Bookmarked](https://images.hindustantimes.com/tech/static/revamp/images/png/Bookmarked.png)

![The breach was closed late last month.](https://images.hindustantimes.com/tech/img/2020/06/01/960x540/BHIM_1591009035324_1591009057844.JPG)

The breach was closed late last month. (Google Play)

![Author Photo](https://images.hindustantimes.com/tech/static/revamp/images/png/HTTech-new-circle-logo.png)

### By IANS

Security researchers have discovered that about 7.26 million records linked to users of mobile payments app BHIM were left exposed to the public by a website.

The exposed data included sensitive information such as names, dates of birth, age, gender, home address, caste status and Aadhaar card details, among others, said the report from VPN review website vpnMentor.

"The scale of the exposed data is extraordinary, affecting millions of people all over India and exposing them to potentially devastating fraud, theft, and attack from hackers and cybercriminals," the security researchers from vpnMentor wrote in a blog post on Sunday.

Also read

click here.

UPDATE: NCPI has rejected reports of a data breach. “We have come across some news reports which suggest data breach at BHIM App. We would like to clarify that there has been no data compromise at BHIM App and request everyone to not fall prey to such speculations. NPCI follows high level of security and an integrated approach to protect its infrastructure and continue to provide a robust payments ecosystem,” NCPI said in a statement.

The breach was closed late last month after the researchers contacted India's Computer Emergency Response Team (CERT-In) twice in a month's time.

The BHIM website in question was developed by a company called CSC e-Governance Services LTD. in partnership with the Indian government.

"In this case, the data was stored on an unsecured Amazon Web Services (AWS) S3 bucket," the researchers said, adding that S3 buckets are a popular form of Cloud storage across the world but require developers to set up the security protocols on their accounts.

"We reached out to the website's developers to notify them of the misconfiguration in their S3 bucket and to offer our assistance. After not receiving a reply, we contacted India's Computer Emergency Response Team (CERT-In), which deals with cybersecurity in the country," they added.

It appears CSC established the website connected to the misconfigured S3 bucket to promote BHIM usage across India and sign up new merchant businesses, such as mechanics, farmers, service providers, and store owners onto the app, according to the research led by vpnMentor's Noam Rotem and Ran Locar.

The volume of exposed data which was first discovered by the security researchers on April 23 amounted to 409GB.

"It's difficult to say precisely, but the S3 bucket seemed to contain records from a short period: February 2019. However, even within such a short timeframe, over 7 million records had been uploaded and exposed," said the report.

"The exposure of BHIM user data is akin to a hacker gaining access to the entire data infrastructure of a bank, along with millions of its users' account information," it added.

Offered by the National Payments Corporation of India (NPCI), the app BHIM, or Bharat Interface for Money, was launched in 2016.

Catch all the Latest Tech News, Mobile News, Laptop News, Gaming news, Wearables News , How To News, also keep up with us on Whatsapp channel,Twitter, Facebook, Google News, and Instagram. For our latest videos, subscribe to our YouTube channel.

01 Jun, 16:28 IST

bhim

![HT Tech Awards](https://tech.hindustantimes.com/ht-tech-power-list-awards-2026/httech-awards-banner-new.webp)

### Related Stories

07 Oct 2026

71,591,008,717,698

NEXT ARTICLE BEGINS

![View all](https://images.hindustantimes.com/tech/static/revamp/images/png/view-all-icon.png)

## Tips & Tricks

![Ghibli-style art](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### How to turn your photos into Ghibli-style art with ChatGPT for free: Step-by-step guide

![How to create an invitation using iPhone’s new Apple Invites app- Step-by-step guide](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### How to create an invitation using iPhone’s new Apple Invites app- Step-by-step guide

![Apple TV app arrives on Android phones and tablets: What you get and how to install it](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### Apple TV app arrives on Android phones and tablets: What you get and how to install it

![Vodafone Idea OTT plans](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### Vodafone Idea users can now stream 17 OTT apps with one subscription: Here's how

![Android data transfer methods](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### How to transfer data from one Android to another using Google backup, USB-C cable, and more

## Editor’s Pick

![iPhone 16e launched with A18 chip, Apple AI—bringing flagship power on a budget: Check specs, price](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### iPhone 16e launched in India: All details about the new budget mobile from Apple

![DeepSeek was founded in China with only a fraction of the budget of the top AI companies in the US.](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### DeepSeek AI: How it works, who’s behind it, how it’s different from ChatGPT, and its big US market impact explained

![iPhone 17 Air likely to get this feature that iPhone 17 Pro models may miss out on](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### iPhone 17 Air likely to get this feature that iPhone 17 Pro models may miss out on

![Google Whisk AI explained: How remixing works, availability, and how it differs from Gemini](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### Google Whisk AI explained: How remixing works, availability, and how it differs from Gemini

![iOS 18.4 beta arriving soon: Know why it is the biggest iPhone update](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### iOS 18.4 beta arriving soon: Know why it is the biggest iPhone update

## Trending Stories

![Airtel 5G SIM card will now be delivered in 10 minutes with Blinkit- How to order](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### Airtel 5G SIM card will now be delivered in 10 minutes with Blinkit- How to order

![Infinix Note 50s 5G+](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### Infinix Note 50s 5G+ set to launch in India with 64MP camera and MediaTek Dimensity 7300 SoC

![Xiaomi X Pro QLED Series sale starts in India: Check price, availability, and more](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### Xiaomi X Pro QLED Series sale starts in India: Check price, availability, and more

![Apple Intelligence AI training](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### Apple plans to train AI using your on-device data without accessing personal content or emails: Report

![CMF Buds 2](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### CMF Buds 2 key features and price revealed ahead of April 28 launch: Details inside

keep up with tech

![Facebook](https://images.hindustantimes.com/tech/static/revamp/images/png/tech-facebook.png)

![Twitter](https://images.hindustantimes.com/tech/static/revamp/images/png/tech-twitter.png)

![WhatsApp](https://images.hindustantimes.com/tech/static/revamp/images/png/tech-whatsApp.png)

![Facebook](https://images.hindustantimes.com/tech/static/revamp/images/png/tech-facebook.png)

## Gaming

![Check out these five gaming monitors under  <span class='webrupee'>₹</span>20,000,](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### Top 5 gaming monitors under ₹20000 you should consider

![gaming consoles](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### Grab gaming consoles at discounted rates during Amazon Great Indian Festival: Up to 72% off

![Pokémon GO Wild Area 2025](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### Pokémon GO Wild Area 2025 to bring Grimmsnarl family, Shiny Hatenna, and global challenges

![Shade Silver](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### Shade Silver free on Steam for a limited time: Here’s how to get it

![Call of duty](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### Call of Duty: Black Ops 7 skips Switch 2 at launch, release date and price leak

![View all](https://images.hindustantimes.com/tech/static/revamp/images/png/view-all-icon.png)

## Trending News

### Airtel 5G SIM card will now be delivered in 10 minutes with Blinkit- How to order

![Airtel 5G SIM card will now be delivered in 10 minutes with Blinkit- How to order](https://images.livemint.com/static/static/1x1_img.gif)

### Infinix Note 50s 5G+ set to launch in India with 64MP camera and MediaTek Dimensity 7300 SoC

![Infinix Note 50s 5G+](https://images.livemint.com/static/static/1x1_img.gif)

### Xiaomi X Pro QLED Series sale starts in India: Check price, availability, and more

![Xiaomi X Pro QLED Series sale starts in India: Check price, availability, and more](https://images.livemint.com/static/static/1x1_img.gif)

### Apple plans to train AI using your on-device data without accessing personal content or emails: Report

![Apple Intelligence AI training](https://images.livemint.com/static/static/1x1_img.gif)

### CMF Buds 2 key features and price revealed ahead of April 28 launch: Details inside

![CMF Buds 2](https://images.livemint.com/static/static/1x1_img.gif)

## Trending Gadgets

Mobiles

Laptops

Tablets

![HT Tech](https://images.hindustantimes.com/tech/static/revamp/images/png/HT_tech-new.gif)

- https://tech.hindustantimes.com/tech/news/7-26-million-records-of-bhim-users-data-leaked-71591008717698.html