The Rajasthan Police may have suffered a data breach. A hacker group alleges that it managed to hack into the official Rajasthan Police website, and gain access to sensitive data.

If true, it could expose as much as 70,000 identity records, 59,000 mobile numbers, millions of emails, and more.On X, cybersecurity account FalconFeedsio first reported the breach. As per the post, a hacker group called “Scarlettgroup” is behind the incident.

Scarlettgroup has shared details about the incident on BreachForums, a dark web forum. A screenshot of the X post. “We have breached Rajasthan Police, and its data is now available for purchase,” Scarlettgroup said on the forum.

The hackers claim that they have access to around 70,000 identity records, and 59,460 mobile numbers. The group says it also obtained details about FIRs, eKYCs, and witness statements.At the time of writing, the Rajasthan Police has not commented on these claims.

India Today Tech cannot independently confirm the authenticity of the breach. The post shared by the hackers on BreachForums.

Is Rajasthan Police data at risk?The hackers claim that they possess emails belonging to the director, inspector general, Other details include attachments totalling 6.63 GB. The attachments allegedly have eKYC documents, FIRs, investigation bundles, pay slips, identity cards, bank statements, scanned reports and circulars.

However, the authenticity, attribution and full extent of the claimed breach remain unverified.Scarlettgroup attached redacted images of sample documents from the data set. They say that unredacted versions of them would be provided upon purchase.

Though no price was given for the sale. The group claims that they will be selling the data to multiple buyers.

Keep in mind that until the leak is verified, we cannot say whether this data is genuine, or if it came directly from the Rajasthan Police website. If genuine, it could be for identity theft and cyberfraud.Earlier today, the State Bank of India confirmed a data breach that compromised the data of nearly 3,900 customers.

While the SBI did not name the group behind the attack, a group called “Siriusim,” had claimed to have hacked the bank on BreachForums.- Ends