Smart City portal compromises information
Bhopal Municipal Corporation (BMC) has compromised personal information and private data of thousands of residents on its smart city web portal through an error in coding.
Anyone can access private information and details of property owners online simply through telephone number, address or property ID. A search throws up not only personal information of the resident but comes tagged with photograph of the house.
The glaring lapse has gone undetected for weeks. Poor coding and security have made the task of copying data even easier. Search string lists the entire list of numbers at one go. For instance, on typing '9', the poorly coded site throws up results for all citizens whose mobile number begins with '9'. Corporation officials are oblivious of the data breach. more