UMANG portal flaws exposed user data across hundreds of services, researchers find

📌 Summary:

• Two security researchers (Akshay C.S. and Viral Vaghela) found multiple vulnerabilities in the UMANG portal that leave potentially millions of users' data exposed
• UMANG (Unified Mobile Application for New-age Governance) aggregates over 2,400 Union and State public services
• Exposed databases include those of the Employees' Provident Fund Organisation (EPFO)
• Flaws stem from the portal's own architecture and have likely existed for years — "almost everything is broken by design", a researcher said

🎯 UPSC Relevance: GS3 — cyber security of critical government digital infrastructure; data protection and privacy risks in e-governance platforms

📝 Prelims Facts:

• UMANG is developed by MeitY and the National e-Governance Division (NeGD)
• EPFO administers provident fund and pension for organised-sector workers

🔑 Key Term: UMANG — single-window mobile platform integrating central and State e-governance services