Congress flags ECINet security vulnerabilities, alleges BJP control

Congress leader Jairam Ramesh on Tuesday highlighted alleged security weaknesses in the Election Commission of India's (ECI) digital systems, sharing details of a security researcher's warning about the voter-services website and ECINet application. According to Ramesh, the researcher had alerted both the ECI and the country's cybersecurity nodal agency, CERT-In, about these vulnerabilities as early as July.

The Congress leader alleged that ECINet, the ECI's internal network application, was designed to centralise voter deletion and addition operations, suggesting potential scope for manipulation from a central authority. The party's assertion raises questions about the security protocols governing India's electoral database management systems during an election year.

The timing of these allegations coincides with heightened scrutiny of India's electoral infrastructure and cybersecurity measures. The Congress's claims underscore broader concerns about the digital backbone supporting India's election process, though the ECI has not yet responded to the specific allegations.

Security vulnerabilities in critical electoral infrastructure could potentially impact voter registration accuracy and data integrity. The incident highlights the importance of robust cybersecurity measures in systems that form the foundation of India's democratic processes. The revelation also raises questions about the timeline and effectiveness of responses to reported security gaps by relevant authorities.