State moves to secure Kanyashree portal after NIC alert
Times of India | 22 November 2024
123 Kolkata: Centre has flagged a potential security breach in the state's Kanyashree portal, prompting Bengal govt to take immediate security measures.
According to a state advisory for security upkeep of the portal, National Informatics Centre (NIC) has flagged a potential breach that may have compromised specific stakeholder accounts. Bengal govt, which is still dealing with tab funds fraud under Taruner Swapno Scheme, is taking no chances.
In an alert to DMs on Nov 19, state has asked them to frequently reset passwords for all accounts suspected of being compromised. It was advised, following NIC recommendations, to use the latest version of the operating system, browsers, plug-ins and related software, and to remove any unauthorised or legacy software from affected systems. They were asked to enable firewalls and install suitable anti-malware, anti-ransomware and anti-exploit software. There was also emphasis on the need to scan systems regularly and users were asked not to save credentials in any web browser.
During the probe into the diverted tab funds, it was revealed that easy default passwords and editable software to upload bank accounts were among the primary reasons for the Rs 1.9 crore fraud.
A department official said: "Girl students are beneficiaries of the Kanyashree scheme, and allocated funds are directly transferred to their accounts. This would be hampered if documents shared by students are wrong or if intentional or unintentional mistakes are made while uploading them. Certain changes are required to secure data."
Advanced Society for Headmasters and Headmistresses general secretary Chandan Maiti said: "We wrote to state govt for urgent security enhancement because Banglar Siksha Portal's vulnerability to hacking poses a significant risk as it contains major data, including Aadhaar numbers, PAN, bank account numbers and other details. So, we appreciate prompt action to secure these."