Telangana cyber bureau probes ransomware attack on TG-iPASS website

The Telangana Cyber Security Bureau has intensified its investigation into a suspected ransomware attack on the TG-iPASS industrial clearances portal, allegedly carried out by hackers operating from Turkey. While services have been restored using data backups, forensic experts are examining whether any sensitive information was compromised and assessing the extent of the breach.

Hyderabad: The Telangana Cyber Security Bureau has intensified its investigation into the suspected ransomware attack on the TG-iPASS industrial clearances portal.

Investigators have reportedly identified hackers operating from Turkey as the suspected perpetrators who allegedly targeted the website on October 22, encrypting its database and altering file names with the extension ‘vgb’, disrupting services. The authorities have since restored the affected services using available data backups.

---

A ransom note containing an email address was reportedly found on the server, though no monetary demand was made.
Following a complaint by the Industries Department, a case was registered under Sections 43 and 66 of the IT Act.

Cyber experts are conducting a forensic examination to determine whether sensitive data was stolen or transferred outside the system.

Cybersecurity authorities are also probing why the hackers repeatedly changed IP addresses and examining the extent of the security breach.