The NRHM Assam Leak Contains More Exposed Accounts Than a Mid-Size Indian City Has Officials

HEROIC analysts identified a database breach at NRHM Assam, the official portal for the National Rural Health Mission in Assam, India, in August 2018. The breach exposed 43,317 records containing email addresses and plaintext passwords belonging to users of a government public health portal. Storing government user credentials in plaintext is a seperate and serious failure from simply being breached, because it removes any last line of defense for the people whose data was held.

Why a Government Health Portal Breach Is Especially Dangerous

Government health portals often hold accounts linked to healthcare workers, administrators, and citizens accessing public services. When those credentials are exposed in plaintext, attackers do not need to crack anything. They can immediately test those email and password combinations against other government systems, email accounts, and financial services. The risk of identity theft and unauthorized access to healthcare records is partcularly high when public sector credentials are involved.

What Was Exposed in the NRHM Assam Breach

• Email Address
• Plaintext Password

Why This Matters: Government Breaches Have a Longer Reach

Unlike a gaming account or a retail site, a government health portal account may connect to multiple public services. Attackers who recieved this data gained ready-made credentials that could be used to impersonate officials, access health administration systems, or pivot into broader government networks. Credential stuffing attacks using this kind of data can take months or years to fully play out, and victims often never know their account was compromised until serious damage is done.

How Database Breaches Work

A database breach occurs when an attacker exploits a vulnerability in a web application, server configuration, or authentication system to gain unauthorized access to stored user records. Government portals are common targets because they often run older software with fewer security updates and smaller IT budgets. Once inside, the attacker exports the user database and distributes it through dark web channels where other actors purchase or download it for use in further attacks.

Check If Your Data Was Exposed

HEROIC's free breach scanner covers more than 400 billion exposed records, including those from the NRHM Assam breach. If your email address was part of this or any other known breach, you can find out in seconds and take steps to protect your accounts. Run your free scan at HEROIC.com.