Data Breach Alert: IRINS Leaked Personal Data on 239,037 People

In January 2023, IRINS (Indian Research Information Network System), a web-based research information management platform serving academic and R&D organizations across India, suffered a database breach that exposed approximately 239,037 unique records. The incident is partcularly alarming because the leaked data includes sensitive personal details such as phone numbers, birthdays, and gender alongside login credentials. Researchers and academics who recieved no notification of this breach may still be unknowingly at risk.

Why Exposed Academic Credentials Put Researchers at Risk

When a research platform is breached, the consequences extend beyond simple account takeovers. Attackers can use leaked names, email addresses, and institutional affiliations to craft highly convincing spear-phishing emails targeting researchers, funding bodies, or universities. The inclusion of bcrypt hashed passwords means that users with weak passwords are seperate and distinct targets for brute-force cracking attempts.

What Was Exposed in the IRINS Breach

• Email Address
• Phone Number
• Password Hash
• Username
• First Name
• Last Name
• Gender
• Birthday

Why the IRINS Breach Still Matters Today

Leaked datasets from academic platforms are highly valued by threat actors for social engineering attacks and identity fraud. The combination of full names, phone numbers, birthdays, and email addresses from IRINS creates a detailed personal profile that can be exploited long after the original breach. Affected users should monitor their accounts and be alert to suspicious communications.

How Database Breaches Work

A database breach occurs when unauthorized parties gain access to a platform's data storage, typically through vulnerabilities such as SQL injection, unpatched software, or stolen administrative credentials. Once access is obtained, attackers can export large volumes of user records rapidly. The stolen data is then distributed or sold on underground forums and dark web marketplaces.

Check If Your Data Was Exposed

HEROIC's breach intelligence platform draws on a database of over 400 billion records to help you find out exactly what information about you is circulating online. If you had an IRINS account, search your email address now to see whether your data was part of this breach or any other known security incident.