It is observed that UIDAI website is experiencing some serious technical issues. It is downloading aadhaar cards of persons other than for which a request is submitted and OTP is authenticated.
Though the downloaded file is protected by the password, this is a serious flaw which needs to be corrected.
UIDAI has recognized the bug and has posted a message on the website. I hope it would be set right soon.
This could be considered as a “Potential Data Breach” and needs to be addressed as such under ITA 2000/DPDPA
Naavi