Millions of Student Data from CUET and Board Exams Allegedly Leaked and Sold Online
Sensitive data belonging to millions of students who appeared for the CUET 2026 and various school board examinations in India is reportedly being sold across multiple websites on the internet. This revelation comes at a time when India is implementing the Digital Personal Data Protection (DPDP) Act. Websites such as studentdataprovider.com are allegedly offering student information for prices ranging from ₹1,000 to ₹10,000. The compromised data includes students' names, mobile numbers, email addresses, dates of birth, parents' names, and other private details. The accessibility of this personal information on the dark web raises significant concerns about data security and privacy for a large segment of the student population.
The alleged sale of student data, occurring concurrently with the implementation of India's DPDP Act, highlights a critical challenge in enforcing new data protection regulations. This situation underscores the persistent vulnerability of sensitive personal information in the digital realm, regardless of legislative advancements. The economic incentive for illicit data brokers, even with a relatively low price point per data set, suggests a robust underground market. Future efforts will need to focus not only on legislative frameworks but also on robust technical enforcement and public awareness campaigns to safeguard student data effectively against evolving cyber threats and market dynamics.
AI-generated to prompt reflection — not editorial opinion, not advice, not a statement of fact. How this works.