National AIDS Research Institute

The National AIDS Research Institute (NARI) is an Indian research organisation dedicated to the study of HIV and AIDS. Its primary function is to conduct scientific investigations related to the virus, its transmission, and its impact on public health. As a national institute, it serves the country’s health research agenda and contributes to the evidence base used by policymakers and health programmes. NARI’s activities are centred on generating knowledge that can inform prevention, treatment, and care strategies for HIV/AIDS in India. The institute operates within the broader framework of India’s public health research system.

On 21 January 2017, NARI experienced a cyber‑security breach carried out by the Shad0w Security crew. Attackers gained access to an internal server by exploiting poor credential management practices, notably credentials stored in a plaintext file, and claimed to have compromised more than one gigabyte of sensitive HIV test results. The group released a limited subset of the data as proof of the intrusion while deliberately withholding the full dataset to avoid potential harm to patients. They stated that their motive was to expose governmental security weaknesses rather than target individuals, emphasizing that the target was selected randomly to evade detection. This incident was part of a broader pattern of similar attacks by the same group against other governmental entities, highlighting vulnerabilities in public sector infrastructure.

NARI’s distinguishing attributes stem from its focus on HIV/AIDS research and its status as a governmental/public sector organisation, as indicated by the context of the breach. The institute’s work is positioned at the intersection of scientific inquiry and national health policy, aiming to address one of the country’s persistent public health challenges. While specific details about its organisational structure or parent entities are not disclosed in the available information, its national designation implies a role that extends across India’s states and territories. The breach incident underscored the importance of robust information security measures for institutions handling sensitive health data. Continued investment in both scientific capabilities and cyber‑defence remains essential for NARI to fulfil its mission effectively.