Gas distributer insane leaked millions of adhar numbers says 'Elliot Alderson'

French security researcher Baptiste Robert, who goes by the pseudonym Elliot Alderson on Twitter, claims to have found a major security lapse that exposed nearly 6.7 million Aadhaar IDs of dealers and distributors associated with Indane, an LPG brand owned by the Indian Oil Corporation.

In a blog post on Medium late Monday, he wrote: "Due to a lack of authentication in the local dealers portal, Indane is leaking the names, addresses and the Aadhaar numbers of their customers". The numbers were meant to be accessible only with a valid username and password.

Using a custom-built Python script to scrape the database, Alderson found data for nearly 11,000 dealers, including names and addresses of more than 5.8 million Indane customers, before his IP was blocked by Indane.

Indane and the Unique Identification Authority of India (UIDAI) were yet to comment on this data leak.