CBSE Revaluation Portal Hit by Reported Malicious Attack

The board moved the portal to Amazon Web Services, added four public‑sector bank payment gateways, enlisted IITs and the DICI to examine the code, and ran a test of the synced gateways.

Overview

Government sources say the CBSE post‑result payment system suffered a reported malicious attack that allowed about 50 students to gain unauthorised access and alter payable amounts on the revaluation portal.
The problem showed up as abnormal fee displays that in some cases swung from Re 1 to roughly Rs 67,000–68,000, a fluctuation officials linked to the HDFC payment gateway integration.
In response, CBSE migrated the portal to Amazon Web Services to relieve capacity issues and integrated four public‑sector bank gateways — State Bank of India, Canara Bank, Indian Bank and Bank of Maharashtra — to diversify payment routing.
Technical teams from IIT Madras, IIT Kanpur and the Digital Infrastructure Corporation of India are auditing the portal code and payment integration to find and fix vulnerabilities discovered during the live launch.
Students face a delay to revaluation payments and submissions while officials complete tests and audits, and the board says it will reopen the portal only after gateways and security measures are confirmed to be stable.