Overview
- A 16-year-old researcher posted on June 2 that a public cloud storage endpoint tied to the JEE Advanced 2026 results system exposed roughly 179,600 result records and about 187,300 admit‑card PDFs without authentication.
- IIT Roorkee acknowledged the configuration issue within hours, thanked the researcher for responsible disclosure and said the storage was set to read‑only while corrective measures were implemented.
- The files reportedly contained personal data such as names, dates of birth and mobile numbers, which experts say can be misused even if records could not be altered.
- IIT Roorkee has not disclosed how long the data was accessible, whether any unauthorised parties downloaded or viewed the files, or whether it will formally notify affected candidates.
- The incident follows other recent disclosures involving CBSE and NTA systems and highlights recurring risks from cloud‑storage configuration errors in India’s digitised exam infrastructure.