Telangana cyber bureau probes ransomware attack on TG-iPASS website - Telangana Today

The Telangana Cyber Security Bureau has intensified its investigation into the suspected ransomware attack on the TG-iPASS industrial clearances portal. Investigators have reportedly identified hackers operating from Turkey as the suspected perpetrators who allegedly targeted the website on October 22, encrypting its database and altering file names with the extension 'vgb', disrupting services.

The authorities have since restored the affected services using available data backups. A ransom note containing an email address was reportedly found on the server, though no monetary demand was made.

Legal action initiated

Following a complaint by the Industries Department, a case was registered under Sections 43 and 66 of the IT Act. These sections cover unauthorized access to computer systems and data theft.

Forensic examination ongoing

Cyber experts are conducting a forensic examination to determine whether sensitive data was stolen or transferred outside the system. Cybersecurity authorities are also probing why the hackers repeatedly changed IP addresses and examining the extent of the security breach.