Hacker Group Claims Access to 86.3 Lakh Rajasthan Police Emails

In a major cybersecurity alarm rattling state law enforcement infrastructure, an obscure threat actor identifying itself as the Scarlet Group has claimed to have breached the central database and communication servers of the Rajasthan Police. Viral posts circulating across hacking forums and dark web channels allege that the syndicate exfiltrated over 86.3 lakh emails alongside confidential administrative records, sensitive investigation files, and citizen identity documents, which are now being solicited for illegal purchase. While top police brass confirmed that forensic teams have not yet discovered any systemic server vulnerabilities or authorized database leaks, central and state agencies have mobilized joint task forces to verify the authenticity of the leak and trace the origin of the compromised records.Anatomy of the Dark Web Claim: Millions of Mails and Sensitive FIRs on SaleThe purported cyber intrusion claims to have intercepted extensive institutional and public records:Massive Mailbox Infiltration Claim: According to claims posted online by the Scarlet Group, the compromised dataset contains information from 5,926 official police mailboxes, 86.3 lakh emails, and more than 78.3 lakh unique email addresses.Citizen Records and Mobile Numbers: The threat actors also claim to possess 70,301 identity records and 59,460 mobile numbers associated with ongoing departmental and public records.DoIT&C Administrative Credentials: Expanding their claim beyond police networks, the hackers alleged access to Rajasthan's Department of Information Technology and Communications (DoIT&C), claiming 1,065 mailboxes, 69 login credentials, 21 virtual private network (VPN) logins, and 64 VPN authentication certificates belonging to senior bureaucrats.Sensitive Investigation Samples: To bolster credibility, the group shared sample documents purportedly containing copies of First Information Reports (FIRs), call detail records (CDRs), e-KYC documents, witness statements, and confidential communications originating from official senior police accounts.Multi-Agency Mobilization: CERT-In and I4C Step in to Audit State ServersReacting swiftly to potential security compromises, high-level cyber units have launched a joint investigation:Deployment of Specialized Units: Cyber Crime DIG Shantanu Kumar stated that the Rajasthan Cyber Security Operations Center (CSOC) of DoIT, the specialized Cyber Commando Team, and internal Incident Response Teams (IRT) were deployed immediately upon receiving the threat inputs.National Security Escalation: India's apex cybersecurity body, the Computer Emergency Response Team (CERT-In), has been formally notified, while the Indian Cyber Crime Coordination Centre (I4C) under the Ministry of Home Affairs is assisting in tracing dark web trail activity and forensic metadata.Preliminary Technical Assessment: DIG Shantanu Kumar clarified that while state technical teams have not yet detected unauthorized system entry points into the core database, authorities are actively evaluating whether leaked files originated from isolated personal email compromises or open-source social media extractions rather than a centralized server breach.Emergency Safety Directives and Dark Web Counter-MeasuresState authorities have rolled out strict preventive protocols across all police establishments to secure administrative networks:Immediate Credential Overhaul: All police personnel and administrative officials across Rajasthan's districts have been ordered to immediately reset their official email credentials, enforce mandatory multi-factor authentication, and update operating systems on departmental laptops and mobile devices.Adherence to Security Guidelines: District superintendents of police and unit chiefs have been instructed to ensure strict compliance with institutional cybersecurity SOPs, forbidding the transfer of classified policing documents via private emails or unauthorized cloud drives.Covert Outreach and Portal Glitch: State cybersecurity personnel reportedly initiated covert contact with the group over Telegram to assess their technical backing, during which negotiations over nominal fee transactions of $100 to $200 were discussed before stalling without resolution; meanwhile, the public-facing Rajasthan Police portal temporarily experienced technical downtime amid elevated server monitoring.