Drdo Cybersecurity Incident: Reports on alleged cybersecurity incident involving DRDO are incorrect & unverified: Official sources

Sources said that all the documents referred to in the alleged data leak are outdated (representative image)

NEW DELHI: Days after Kerala-based Alibi Global Threat Intelligence Group alleged data from Defence Research & Development Organisation was put on sale on dark web, official sources said on Tuesday that “reports in certain sections of the media on an alleged cybersecurity incident involving DRDO are incorrect and unverified”.“Thorough investigation into the alleged breach has been carried out by the relevant agencies at the level of the defence ministry. It is clarified that there is currently no evidence of any active cyber attack, unauthorised network intrusion, or ongoing data exfiltration,” the sources said.Alibi Global Threat Intelligence Group’s report said the alleged data, which is claimed to be of 31 gigabytes (GB), has reportedly been advertised for sale for US $8000 in the past two weeks.However, sources said, “Most of the data alleged to be leaked is of unclassified nature and bears no confidentiality.Certain unclassified data that is being shown as critical is from an old data breach of 2020-2022 vintage. The threat actors have deliberately and evidentially fabricated the documents to make them appear as recent and confidential.”They further said that all the documents referred to in the alleged data leak are outdated, having undergone multiple revisions, and are no longer representative of current configurations. “The relevance of this outdated documentation has been evaluated and is no longer applicable. The claims, therefore, made are unverifiable,” the sources said.“The investigation reveals the data to be on sale by several threat actors. However, the data being sold is same across these threat actors and bears no current relevance to the department and the defence ministry,” the sources said, adding “additionally, the allegedly leaked data has been deliberately fabricated by the threat actors, motivated by financial gains, to cause panic, collect larger sums of money for the data and appear authentic.”