Govt website messes up with its users’ privacy data

CCCcore.co.in, a consumer complaint website supported by the Ministry of Consumer Affairs, Government of India, seems to be displaying username, password (mind you, not in asterisks), email id, mobile number and postal address of its users who registered as complainants on the website.

“What an irony! A government website set up to help consumers in India get their grievances addressed online has, perhaps unknowingly, turned out as a major source of grievance for its users,” a Core Centre user who tipped us of this bizarre happening but didn’t want to get named, has told AlooTechie.

We are told that the CCCcore.co.in website does not only display the user’s complete profile data, including username and password, in the Edit Profile page but also displays similar data of other users when the page is refreshed. What’s worse, it seems that one can also edit the profile details of other users on this website.



“This obviously is not a consumer-feel-good factor employed by the government website. This is a serious flaw in the entire system of the service,” the Core Centre user has said, adding with a grim note, “There are people who are more internetically evolved and educated than me. Some of them are also known as hackers!” Is someone listening?