uidai.gov.in Domain Breach Exposure Report

The domain uidai.gov.in has experienced a high-risk score of 92, primarily driven by a significant volume of historical data breaches (82.9%) and active infostealer logs (17.1%) over the period of July 2025 to June 2026. A total of 33,376 events were recorded, impacting 143 employees and 33,233 clients. The data breaches are predominantly sourced from "Combolist sources," suggesting compromised credentials. Malware families such as LummaC2, Vidar, and Rhadamanthys are frequently observed in infostealer logs, indicating active credential harvesting and potential further compromise. The targeted services include e-learning and e-aadhaar portals, which are critical for citizen services. Given the high volume of data breaches and the presence of active infostealer activity targeting critical citizen-facing services, this exposure presents a severe risk. The prevalence of "Combolist sources" indicates that credentials exposed elsewhere are being leveraged against this domain, potentially leading to unauthorized access and further data exfiltration. Remediation efforts should focus on immediate credential rotation for all affected employees and clients, enhanced monitoring for suspicious login activity on e-learning and e-aadhaar platforms, and a review of access control policies. Given the nature of the domain and its services, the closest industry sector is Government Services, which is not available in the provided enum. Therefore, we will use Technology & SaaS as the closest available option.