The recent data breach involving India's Star Health has raised significant concerns regarding data protection on messaging platforms. Telegram, the platform in question, has expressed its limitations in actively monitoring all accounts, particularly those that may be misused for distributing sensitive information. This situation has emerged following a report detailing how a hacker utilized Telegram chatbots and a related site to expose private customer information.
The leading health insurance provider in India has faced severe backlash since the revelation of the data leak on September 20, highlighting the potential risks associated with digital communications. Following this incident, Star Health sought legal intervention from the Madras High Court, requesting that Telegram take action to eliminate all chatbots associated with this breach.
During the court proceedings, Telegram’s legal representative argued that overseeing all chatbots to uncover leaked data would contradict Indian laws. Nonetheless, Telegram expressed its willingness to remove exposed data if it receives assistance from Star Health, which has been threatened with a ransom demand of $68,000 from the hacker to cease the ongoing leaks.
The repercussions for Star Health have been tangible, with its share prices falling nearly 11% since the incident's public disclosure, reflecting the market's reaction to the crisis. On Friday, the shares experienced a further decline of just over 1%.
Globally, Telegram has attracted increasing scrutiny, particularly after its founder faced formal inquiries in France related to purported illegal activities linked to the platform. Despite such pressures, both Durov and Telegram maintain their stance of innocence and are actively addressing the mounting concerns.
In a statement made during the hearing, Judge Kumaresh Babu of the Madras High Court urged Star Health to provide specific information about the troublesome chatbots. He ordered Telegram to take immediate action against those identified.
In a related development, Star Health is conducting its own investigation into allegations surrounding the involvement of its chief security officer in the data leak. The officer is said to be fully cooperating with the inquiry, which currently lacks evidence pointing to any wrongdoing on his part. However, he has refrained from making public comments regarding the situation.
The legal proceedings are expected to continue in two weeks.