In the digital age, data is the new oil. But in India, it’s also becoming one of the most illegally traded commodities. From SIM card details to Aadhaar numbers, millions of Indians’ personal information is being leaked, bought, and sold every day — often for less than the price of a cup of tea.
A Booming Underground Economy
The illegal data trade in India has skyrocketed in recent years. Several Telegram channels and dark web forums openly sell databases containing:
- Phone numbers and email IDs
- PAN and Aadhaar numbers
- Bank account details
- Insurance policy data
- COVID-19 test results
Some sellers even offer targeted leads, like credit card holders or recent loan applicants, for marketing or fraud.
How Does This Happen?
Data leaks happen due to:
- Weak cybersecurity in private firms
- Rogue employees selling data to brokers
- Public databases with poor protection
- Phishing campaigns and malware
Even popular fintech, telecom, and health portals have been linked to leaks, though often unofficially.
Real Examples
- In 2023, a massive leak exposed data of over 81 crore Indians, including Aadhaar and passport info.
- A 2024 sting revealed insurance data of 2 crore people being sold for Rs. 2,000.
- In May 2025, a report linked three major data-selling Telegram channels to fraud networks in Noida and Hyderabad.
Why This Is Dangerous
When your data is in the wrong hands, the consequences are serious:
- SIM swap attacks to steal your OTPs
- Loan frauds using stolen KYC
- Blackmail scams using sensitive info
- Identity theft to open fake accounts
And worst of all, most victims never even realize how their data was stolen.
Is the Government Doing Enough?
India passed the Digital Personal Data Protection Act, 2023, but enforcement remains weak. Most cyber cells lack the resources to track down large-scale networks. Arrests happen, but new channels pop up quickly.
Until stronger regulatory oversight and penalties exist, the illegal data economy will thrive.
How to Protect Yourself
- Use strong passwords and change them regularly.
- Avoid sharing sensitive details on calls, emails, or unknown apps.
- Check if your data has been leaked using services like Have I Been Pwned.
- Enable 2FA on all important apps and logins.
- Monitor bank/SMS alerts for suspicious activity.
Final Thoughts
India is on the brink of a data crisis, and the average citizen is the biggest victim. As awareness grows, it’s time for stricter laws, ethical tech practices, and more digital literacy.
Until then, the shadow market of illegal data sales will continue to thrive in silence.
Sources:
Sandeep for Pulsewire Editorial Team. Sandeep is a cybersecurity analyst and researcher specializing in India’s digital economy and data privacy landscape. This article was prepared using verified sources, rigorous analysis, and a commitment to factual accuracy. Sandeep is not a legal or financial advisor.
