What happened
On 25 Oct 2026, a ransomware strain compromised the Telangana iPASS portal, encrypting the underlying PostgreSQL database and rendering the service unavailable to citizens. The state government announced that a recent backup exists and will be used to restore operations, but no public details on the ransomware family or ransom demand were released.
Why it matters for trust and compliance
- The breach illustrates why organizations must maintain continuously monitored incident‑response controls and immutable backup evidence to meet audit‑readiness expectations across frameworks such as NIST CSF 2.0.
- Ensures incident‑response and recovery controls are continuously evidenced for audit readiness.
- Provides verifiable backup/restore logs that demonstrate due diligence and defensible evidence.
Who is affected
Indian government agencies Public‑sector digital identity services
Recommended actions
- Validate that backup schedules, retention, and restore tests are documented and produce immutable logs.
- Map incident‑response playbooks to NIST CSF 2.0 Respond and Recover functions, and collect continuous evidence of execution.
- Update third‑party risk assessments for any vendors supplying the iPASS platform.