Cyber Incident Victim: Karnataka State Higher Education Council
Date:
Aug 2015
Location:
India
Summary
The Karnataka State Higher Education Council's website was compromised by the hacking group Clinkz48, resulting in prolonged downtime and defacement featuring a caricature, offensive messages, and claims of data control. The National Informatics Centre restored functionality, while officials initiated a police complaint and committed to implementing enhanced security measures to prevent future breaches. This incident highlighted Bengaluru's prominence in cybercrime statistics within India.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
The website of the Karnataka State Higher Education Council (kshec.ac.in) was compromised on August 20-21, 2015, by a hacking group identifying itself as Clinkz48. The attack rendered the website non-functional from late Thursday until Friday afternoon, disrupting access for approximately 18 hours. Attackers replaced the homepage content with a defacement message featuring a caricature of a laughing man holding wine, accompanied by the phrases "CYBER TEAM ROCKS" and "Hacked by Clinkz48" prominently displayed. Below this imagery appeared the text: "Your data belongs to me. F*** Your System India, :P Noob!!" This explicit message suggested unauthorized access to the council's systems and data, though no specific data theft claims were substantiated in available reports. The National Informatics Centre (NIC), responsible for maintaining government web infrastructure, restored functionality by Friday afternoon. The incident marked another security breach affecting Bengaluru-based web servers, continuing a pattern of vulnerabilities in the region's digital infrastructure.
Bengaluru's status as India's cybercrime capital was reinforced by contemporaneous National Crime Records Bureau statistics showing the city recorded 657 IT Act violations in 2015—the highest among 53 major cities. Karnataka ranked third nationally with 1,020 cybercrime cases. Principal Secretary Bharath Lal Meena confirmed the Higher Education Department would file a formal police complaint regarding the breach. The department committed to implementing enhanced security measures for its web properties and pledged to share security recommendations with other state agencies. No technical details regarding attack vectors, data compromise scope, or forensic findings were disclosed publicly. The council's response focused on procedural actions—law enforcement notification and NIC-led restoration—without elaborating on specific vulnerabilities exploited or long-term security improvements planned.