Company Details
ministry-of-defence_india
5,199
18,050
92
onlinecareer360.com
0
MIN_2033262
In-progress

Ministry of Defence of India Company CyberSecurity Posture
onlinecareer360.comThe Government of India is responsible for ensuring the defence of India and every part thereof. The Supreme Command of the Armed Forces vests in the President. The responsibility for national defence rests with the Cabinet. This is discharged through the Ministry of Defence, which provides the policy framework and wherewithal to the Armed Forces to discharge their responsibilities in the context of the defence of the country. The Raksha Mantri (Defence Minister) is the head of the Ministry of Defence. The principal task of the Defence Ministry is to obtain policy directions of the Government on all defence and security related matters and communicate them for implementation to the Services Headquarters, Inter-Services Organisations, Production Establishments and Research and Development Organisations. It is also required to ensure effective implementation of the Government's policy directions and the execution of approved programmes within the allocated resources. Ministry of Defence comprises of four Departments viz. Department of Defence (DOD), Department of Defence Production (DDP), Department of Defence Research & Development (DDR&D) and Department of Ex-Servicemen Welfare and also Finance Division.
Company Details
ministry-of-defence_india
5,199
18,050
92
onlinecareer360.com
0
MIN_2033262
In-progress
Between 700 and 749

MDI Global Score (TPRM)XXXX

Description: The Ministry of Defence (MoD) exposed the personal information of approximately 18,700 Afghans, including names and contact details, due to a catastrophic data leak. The breach occurred when an MoD official emailed a secret database to trusted contacts in February 2022. The leak was discovered after parts of the database were posted online in August 2023. The government attempted to keep the breach secret using a superinjunction, but eventually notified those affected. The breach has put lives at risk, particularly from Taliban reprisals, and has caused significant distress and safety concerns for the affected individuals, many of whom are still awaiting relocation to the UK.
Description: A private vendor previously employed by the ministry of defense may have walked away with the personal data of 50 lakh ex-servicemen. ECHS was requested vide D/o ESW (Ex-servicemen welfare) aforesaid note dated 16.03.2018 for taking necessary action within three days on the issues raised by Commodore Batra (Retd). However, after lapsing the three days’ time, action taken report/status on the above subject is still awaited from CO, ECHS. ECHS cannot comment whether a copy of the same has been retained by the company or not.


No incidents recorded for Ministry of Defence of India in 2025.
No incidents recorded for Ministry of Defence of India in 2025.
No incidents recorded for Ministry of Defence of India in 2025.
MDI cyber incidents detection timeline including parent company and subsidiaries

The Government of India is responsible for ensuring the defence of India and every part thereof. The Supreme Command of the Armed Forces vests in the President. The responsibility for national defence rests with the Cabinet. This is discharged through the Ministry of Defence, which provides the policy framework and wherewithal to the Armed Forces to discharge their responsibilities in the context of the defence of the country. The Raksha Mantri (Defence Minister) is the head of the Ministry of Defence. The principal task of the Defence Ministry is to obtain policy directions of the Government on all defence and security related matters and communicate them for implementation to the Services Headquarters, Inter-Services Organisations, Production Establishments and Research and Development Organisations. It is also required to ensure effective implementation of the Government's policy directions and the execution of approved programmes within the allocated resources. Ministry of Defence comprises of four Departments viz. Department of Defence (DOD), Department of Defence Production (DDP), Department of Defence Research & Development (DDR&D) and Department of Ex-Servicemen Welfare and also Finance Division.


Si necesitas información general y especializada sobre los servicios públicos madrileños puedes llamar al teléfono de Atención al Ciudadano 012. En la Comunidad de Madrid estamos encantados de recibir comentarios y favorecer el diálogo, por eso te proponemos unas normas básicas de participación:

Working for Switzerland Seven departments, the Federal Chancellery and around 70 administrative units make up the Federal Administration. With around 38,000 employees, it is one of the largest employers in Switzerland. People from all regions of the country work in the Federal Administration un

Employment with the State of Ohio is more than ‘just a job’ – it is a privilege to serve our families, friends and neighbors who rely on us throughout our great state. We are a team of dedicated public servants committed to high performance, innovative thinking, and delivering excellent and efficien

We are the largest and most diverse organisation in our state. We have more than 90 government departments and organisations providing essential services across 4000+ locations—from the Torres Strait to the Gold Coast; Mount Isa to Brisbane. We are passionate about making Queensland better through

The Department of Education is responsible for delivering the Victorian Government’s commitment to making Victoria the Education State, where all Victorians have the best learning and development experience, regardless of their background, postcode or circumstances. Education remains a cornerstone f

Welcome to the United States Department of Veterans Affairs (VA) Official LinkedIn page. We're recruiting the finest employees to care for our #Veterans. Following/engagement ≠ signify VA endorsement. This is a moderated page, meaning that all comments will be reviewed for appropriate content. Ple

Bli en samhällsbyggare – jobba i Malmö stad! Genom att arbeta i Malmö stad får du möjlighet att arbeta med hållbar samhällsutveckling. Som en samhällsbyggare spelar du en viktig roll i Malmös utveckling och därför ser vi oss som framtidens arbetsplats. Människors lika värde är en förutsättning fö

Travailler à l’Assurance Maladie, c’est donner une nouvelle dimension à votre métier et agir au quotidien pour la protection de notre système de santé. Participez à une grande diversité de projets dans un cadre bienveillant et soyez fier de contribuer à une mission essentielle : agir ensemble, prot

Bij de Vlaamse overheid geef je elke dag opnieuw het beste van jezelf, in een job die een verschil maakt in de maatschappij. Pas afgestudeerd of al een aantal jaren professionele ervaring achter de rug? Op zoek naar een job als arbeider, bediende, leidinggevende, administratief medewerker, ingenie
.png)
The industrial corporation is involved in major civil and military land, naval, air, space and cyber programmes worldwide.
When India and Israel convened the 17th Joint Working Group (JWG) meeting on defence cooperation in Tel Aviv this November, it wasn't just...
Tel Aviv: India's Defence Secretary Rajesh Kumar Singh met Israeli Defence Minister Israel Katz in Tel Aviv on Tuesday, where both sides...
India and Israel sign a key MoU to deepen defense, AI, and cybersecurity cooperation, promoting co-development and shared technological innovation.
The 17 th meeting of Joint Working Group (JWG) on defence cooperation, co-chaired by Defence Secretary Shri Rajesh Kumar Singh and Director...
New Delhi [India], October 17: Globals, a Bengaluru-headquartered cybersecurity and cyberwarfare solutions company, participated in the...
Indian Navy successfully organized a seminar on 'Impact of Cyber Attacks on Maritime Sector and Its Effects on National Security and...
INDIAN NAVY TO ORGANISE SEMINAR ON 'IMPACT OF CYBER ATTACKS ON MARITIME SECTOR AND ITS EFFECTS ON NATIONAL SECURITY AND INTERNATIONAL...
India and Morocco sign MoU to strengthen defense cooperation, cybersecurity, naval collaboration, and joint military training.

Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
The official website of Ministry of Defence of India is https://onlinecareer360.com/.
According to Rankiteo, Ministry of Defence of India’s AI-generated cybersecurity score is 720, reflecting their Moderate security posture.
According to Rankiteo, Ministry of Defence of India currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.
According to Rankiteo, Ministry of Defence of India is not certified under SOC 2 Type 1.
According to Rankiteo, Ministry of Defence of India does not hold a SOC 2 Type 2 certification.
According to Rankiteo, Ministry of Defence of India is not listed as GDPR compliant.
According to Rankiteo, Ministry of Defence of India does not currently maintain PCI DSS compliance.
According to Rankiteo, Ministry of Defence of India is not compliant with HIPAA regulations.
According to Rankiteo,Ministry of Defence of India is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.
Ministry of Defence of India operates primarily in the Government Administration industry.
Ministry of Defence of India employs approximately 5,199 people worldwide.
Ministry of Defence of India presently has no subsidiaries across any sectors.
Ministry of Defence of India’s official LinkedIn profile has approximately 18,050 followers.
Ministry of Defence of India is classified under the NAICS code 92, which corresponds to Public Administration.
No, Ministry of Defence of India does not have a profile on Crunchbase.
Yes, Ministry of Defence of India maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/ministry-of-defence_india.
As of November 28, 2025, Rankiteo reports that Ministry of Defence of India has experienced 2 cybersecurity incidents.
Ministry of Defence of India has an estimated 11,116 peer or competitor companies worldwide.
Incident Types: The types of cybersecurity incidents that have occurred include Data Leak and Breach.
Detection and Response: The company detects and responds to cybersecurity incidents through an incident response plan activated with yes, and containment measures with superinjunction to keep the breach secret, and remediation measures with email notifications to affected individuals, and recovery measures with relocation of affected individuals to the uk, and communication strategy with email notifications and public disclosure after lifting the superinjunction..
Title: Potential Data Breach Involving Personal Data of Ex-Servicemen
Description: A private vendor previously employed by the ministry of defense may have walked away with the personal data of 50 lakh ex-servicemen.
Date Detected: 2018-03-16
Type: Data Breach
Attack Vector: Insider Threat
Threat Actor: Private Vendor
Title: UK Ministry of Defence Data Leak
Description: A catastrophic data leak by the UK Ministry of Defence exposed the personal information of around 18,700 Afghans, including names and contact details. The breach occurred when an MoD official emailed a secret database to trusted contacts in February 2022. The leak was discovered after parts of the database were posted online in August 2023. The breach put many lives at risk, particularly from Taliban reprisals.
Date Detected: 2023-08
Date Publicly Disclosed: 2024
Type: Data Breach
Attack Vector: Human Error
Common Attack Types: The most common types of attacks the company has faced is Breach.
Identification of Attack Vectors: The company identifies the attack vectors used in incidents through Private Vendor.

Data Compromised: Personal information including names and contact details
Operational Impact: Increased risk to affected individuals, relocation of 16,000 Afghans to the UK
Brand Reputation Impact: Significant damage to trust in the UK government
Identity Theft Risk: High
Commonly Compromised Data Types: The types of data most commonly compromised in incidents are Personal Data and Personal information.

Entity Name: Ministry of Defense
Entity Type: Government
Industry: Defense
Customers Affected: 50 lakh ex-servicemen

Entity Name: UK Ministry of Defence
Entity Type: Government
Industry: Defense
Location: United Kingdom
Customers Affected: 18,700 Afghans

Incident Response Plan Activated: Yes
Containment Measures: Superinjunction to keep the breach secret
Remediation Measures: Email notifications to affected individuals
Recovery Measures: Relocation of affected individuals to the UK
Communication Strategy: Email notifications and public disclosure after lifting the superinjunction
Incident Response Plan: The company's incident response plan is described as Yes.

Type of Data Compromised: Personal Data
Number of Records Exposed: 50 lakh
Sensitivity of Data: High
Personally Identifiable Information: Yes

Type of Data Compromised: Personal information
Number of Records Exposed: 18,700
Sensitivity of Data: High
Data Exfiltration: Yes
Personally Identifiable Information: Names and contact details
Prevention of Data Exfiltration: The company takes the following measures to prevent data exfiltration: Email notifications to affected individuals.
Handling of PII Incidents: The company handles incidents involving personally identifiable information (PII) through by superinjunction to keep the breach secret.
Data Recovery from Ransomware: The company recovers data encrypted by ransomware through Relocation of affected individuals to the UK.

Source: The Independent
Additional Resources: Stakeholders can find additional resources on cybersecurity best practices at and Source: ECHSDate Accessed: 2018-03-16, and Source: The Independent.

Investigation Status: Pending

Investigation Status: Ongoing
Communication of Investigation Status: The company communicates the status of incident investigations to stakeholders through Email notifications and public disclosure after lifting the superinjunction.

Customer Advisories: Email notifications to affected individuals
Advisories Provided: The company provides the following advisories to stakeholders and customers following an incident: was Email notifications to affected individuals.

Entry Point: Private Vendor

Root Causes: Human error in emailing a secret database
Last Attacking Group: The attacking group in the last incident was an Private Vendor.
Most Recent Incident Detected: The most recent incident detected was on 2018-03-16.
Most Recent Incident Publicly Disclosed: The most recent incident publicly disclosed was on 2024.
Most Significant Data Compromised: The most significant data compromised in an incident were Personal Data and Personal information including names and contact details.
Containment Measures in Most Recent Incident: The containment measures taken in the most recent incident was Superinjunction to keep the breach secret.
Most Sensitive Data Compromised: The most sensitive data compromised in a breach were Personal information including names and contact details and Personal Data.
Number of Records Exposed in Most Significant Breach: The number of records exposed in the most significant breach was 18.8K.
Most Recent Source: The most recent source of information about an incident are The Independent and ECHS.
Current Status of Most Recent Investigation: The current status of the most recent investigation is Pending.
Most Recent Customer Advisory: The most recent customer advisory issued was an Email notifications to affected individuals.
Most Recent Entry Point: The most recent entry point used by an initial access broker was an Private Vendor.
.png)
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to versions 19.2.16, 20.3.14, and 21.0.1, there is a XSRF token leakage via protocol-relative URLs in angular HTTP clients. The vulnerability is a Credential Leak by App Logic that leads to the unauthorized disclosure of the Cross-Site Request Forgery (XSRF) token to an attacker-controlled domain. Angular's HttpClient has a built-in XSRF protection mechanism that works by checking if a request URL starts with a protocol (http:// or https://) to determine if it is cross-origin. If the URL starts with protocol-relative URL (//), it is incorrectly treated as a same-origin request, and the XSRF token is automatically added to the X-XSRF-TOKEN header. This issue has been patched in versions 19.2.16, 20.3.14, and 21.0.1. A workaround for this issue involves avoiding using protocol-relative URLs (URLs starting with //) in HttpClient requests. All backend communication URLs should be hardcoded as relative paths (starting with a single /) or fully qualified, trusted absolute URLs.
Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Uncontrolled Recursion vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft deep ASN.1 structures that trigger unbounded recursive parsing. This leads to a Denial-of-Service (DoS) via stack exhaustion when parsing untrusted DER inputs. This issue has been patched in version 1.3.2.
Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Integer Overflow vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft ASN.1 structures containing OIDs with oversized arcs. These arcs may be decoded as smaller, trusted OIDs due to 32-bit bitwise truncation, enabling the bypass of downstream OID-based security decisions. This issue has been patched in version 1.3.2.
Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Prior to versions 7.0.13 and 8.0.2, working with large buffers in Lua scripts can lead to a stack overflow. Users of Lua rules and output scripts may be affected when working with large buffers. This includes a rule passing a large buffer to a Lua script. This issue has been patched in versions 7.0.13 and 8.0.2. A workaround for this issue involves disabling Lua rules and output scripts, or making sure limits, such as stream.depth.reassembly and HTTP response body limits (response-body-limit), are set to less than half the stack size.
Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. In versions from 8.0.0 to before 8.0.2, a NULL dereference can occur when the entropy keyword is used in conjunction with base64_data. This issue has been patched in version 8.0.2. A workaround involves disabling rules that use entropy in conjunction with base64_data.

Get company history
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.