Marriage portal exposes applicants’ Aadhaar, addresses on Telangana govt site

HYDERABAD: A serious data privacy lapse has surfaced on the Telangana government’s registration website used for Special Marriage Act applications, with applicants’ sensitive personal details accessible without safeguards.
The Special Marriage registration service is part of the state’s integrated registration portal, which also handles property registration, firm and society registration, and market value searches.
Under the Special Marriage Act, authorities must publish marriage notices for 30 days to invite objections. The online dashboard accordingly displays limited details such as names, photographs, partial mobile numbers and addresses of applicants.
However, the portal also shows application numbers and notice dates. By entering these details, any user can download complete application forms containing full phone numbers, email addresses, Aadhaar numbers, complete residential addresses and guardian details.
Experts flag identity theft and misuse risks
Cybersecurity specialists said the exposure could lead to identity theft, harassment and misuse of personal data.
“Most of the data displayed on the marriage dashboard is concealed, but the data within the application is very sensitive and can be used for malicious purposes without the applicant ever knowing,” said Harisha K., a cybersecurity expert.
She added that Aadhaar numbers, phone numbers and addresses could be exploited to create fake accounts or facilitate criminal activity.
Experts said while limited public disclosure is mandated by law, sensitive information should be masked or protected through verification systems such as one-time passwords (OTP) or password-based access.
“The application has no need to be out in the open for anyone to see. Any basic security measure can prevent this exposure,” Harisha added.
Interfaith applicants’ details circulated online
The issue has taken a more serious turn with details of interfaith marriage applicants being circulated online by certain groups and right-wing associations.
These organisations have allegedly shared photographs, addresses and phone numbers of applicants on social media, often accompanied by derogatory religious remarks a practice known as doxxing.
The alleged misuse has raised concerns over privacy violations and the potential for fuelling religious hostility.
As reported by Deccan Chronicle.

