Cyber Incident Victim: Uttarakhand
Date:
Oct 2024
Location:
India
Summary
A major cyberattack disrupted the entire IT infrastructure of Uttarakhand, paralyzing critical government operations and forcing the shutdown of essential services including the CM Helpline, Land Registry, and e-Office platforms. Administrative functions across state offices, including the Secretariat, remained stalled for two consecutive days due to the incident. The Information Technology Development Agency detected malware during routine system scanning, prompting precautionary measures such as disabling the primary data center and suspending all applications for comprehensive security assessments. Restoration efforts were underway to reactivate services, with 186 government websites confirmed impacted by the attack.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 0 motives | 0 techniques |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
A major cyberattack struck Uttarakhand's state IT infrastructure on October 2, 2024, causing widespread disruption to government operations. During routine scanning activities, officials from the Information Technology Development Agency (ITDA) discovered malware infection on a critical machine within their systems. As a precautionary containment measure, ITDA Director Nikita Khandelwal ordered the immediate shutdown of the state's primary data center. This decisive action resulted in the complete suspension of all hosted government applications and online services. Among the affected platforms were essential citizen services including the CM Helpline portal, Land Registry systems, and the e-Office administrative platform. The technical response team initiated comprehensive scanning procedures across all systems to assess the full extent of compromise.
The attack paralyzed 186 government websites and crippled digital operations across state offices for two consecutive days, significantly impeding administrative functions statewide. Government work remained stalled at all levels, including critical operations within the Secretariat, the state's administrative nerve center. Public-facing digital services became completely unavailable, forcing suspension of routine governmental transactions and citizen interactions. Recovery efforts focused on thorough system testing and malware eradication, with authorities aiming to restore partial functionality by the morning following the second day of outages. The incident marked one of the most severe digital disruptions in Uttarakhand's recent history, demonstrating systemic vulnerabilities in critical state infrastructure without revealing technical specifics of the attack vector or perpetrator identity.