Cyber Incident Victim: Utkal University
Date:
May 2016
Location:
India
Summary
Utkal University experienced multiple cyberattacks targeting its official and admission websites, prompting a shift from online to offline admissions. Hackers identifying as 'Pak Cyber Attackers' defaced the main website without data loss, while subsequent breaches on the e-admission portal led to server deactivation amid allegations by former students that admission data was stolen by 'Team Pak Cyber Lions' member Ahmed Chaanda. The university denied data compromise but filed a cybercrime complaint and suspended online admissions, distributing forms via email and physical offices while extending submission deadlines. Authorities considered involving the National Informatics Centre for future website management to enhance security.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 2 techniques |
| Threat Actors | Type | Location |
|---|---|---|
| 2 actors | Available to members | Available to members |
Description
In May 2016, Utkal University faced repeated cybersecurity breaches targeting its online admission systems. On May 10, the PG Council deactivated the e-admission website server (www.eadmission.utkaluniversity.ac.in) following persistent hacking attempts, forcing a shift to offline admissions. This occurred one week after the main university website (utkaluniversity.ac.in) had been defaced by hackers identifying as 'Pak Cyber Attackers', though no data loss occurred during that initial breach. Registrar Manmath Biswal filed a formal complaint with the Cyber Crime Cell of Odisha's Crime Branch regarding the attacks. By the time of the server shutdown, 13,355 students had registered through the e-admission portal, with over 1,000 applications each for Chemistry, Commerce, Physics, and Zoology programs. University officials maintained that no admission data was compromised during either incident.
The attacks prompted emergency measures including complete termination of the e-admission process. The PG Council arranged to email application forms to registered students while offering physical forms free of charge at university offices, extending the submission deadline from May 14 to June 7. Examinations were rescheduled for June 19-28. Vice-Chancellor Ashok Das announced PDF forms would remain available on the deactivated website for download. Former students involved in prior website maintenance disputed the university's claim of no data loss, alleging substantial admission data theft by hacker 'Ahmed Chaanda' of 'Team Pak Cyber Lions'. In response to the breaches, university authorities considered transferring all website hosting and maintenance responsibilities to India's National Informatics Centre (NIC), abandoning the private contractor All India Online that had managed the systems since 2013. The incident marked a significant disruption to online admissions operational since 2011-12.