Data tampering, fraud detected in Ayushman Bharat, FIR filed

Lucknow: An FIR was lodged at Hazratganj police station late Saturday following a complaint from the State Health Agency – Ayushman Bharat, Uttar Pradesh, over massive data manipulation and cyber fraud.This involved unauthorized changes in Aadhaar-linked mobile numbers of officials and employees associated with SACHIS (State Agency for Comprehensive Health and Integrated Services), which operates under the Ayushman Bharat–Pradhan Mantri Jan Arogya Yojana and Mukhyamantri Jan Arogya Abhiyan.According to the written complaint submitted by state nodal officer, Dr Sachin Vaishya, the agency discovered that over the past month, the registered mobile numbers linked with several officials' Aadhaar IDs were changed without their knowledge or permission. The altered numbers were allegedly used to receive OTPs and gain unauthorized access to multiple official portals maintained by the National Health Authority (NHA), Govt of India.The agency suspects that the changes were carried out through illegal access to the Aadhaar authentication system or by using forged documents and fake identities. The tampering exposed sensitive personal data of employees, posing serious risks of identity theft, financial fraud, and digital impersonation within govt services.The complaint cited a letter dated Oct 21, 2025, sent by Shivam Pathak, president of Shri Baba Shyam Samaj Seva Sansthan, IIM Road, Lucknow, to the CEO of Ayushman Bharat, Uttar Pradesh, highlighting unauthorized issuance of Ayushman cards.During verification, the user ID registered under Safe Way Health Insurance TPA — was found to belong to one Abul Kalam, who had no official association with the firm. The TPA verbally confirmed that the said user was not an authorized employee.Inquiry revealed a pattern of similar unauthorized logins from changed Aadhaar-linked numbers. Complaints were also filed with the UIDAI regional office in Gomtinagar, as well as cyber crime authorities, requesting immediate investigation and corrective measures.To prevent further misuse, the State Health Agency informed the National Health Authority and UIDAI headquarters in New Delhi through official communication dated Oct 30, 2025, seeking a comprehensive probe into data breach and stringent action against those responsible.Officials suspect that the same network could be behind both the unauthorized Ayushman card generation flagged by Shivam Pathak and the recent Aadhaar-linked mobile number tampering.Police registered the FIR under appropriate sections of the IPC and IT Act on the direction of DCP Central Lucknow after receiving the complaint.Authorities said efforts are underway to strengthen portal security and coordinate with UIDAI and NHA to ensure that no further compromise of official data occurs.Additional DCP, Central Zone, JK Dubey, said that an FIR under IT Act had been registered.