Thursday, June 4, 2026 –
India’s education system is reeling from another cybersecurity embarrassment, this time striking at the very top of the academic pyramid. A 16-year-old student, Rylen Anil, flagged a serious data-exposure issue in the JEE Advanced 2026 results portal, alleging that a misconfigured cloud storage bucket linked to the portal exposed the personal and examination details of nearly 1.8 lakh candidates shortly after results were declared on June 1.
The researcher said details of approximately 1,79,600 candidate result records and nearly 1,87,300 admit-card PDF files could be accessed through the system without any login or password — and IIT Roorkee has acknowledged the issue, saying corrective action is being taken. However, the institute has not disclosed how long the data was exposed or whether any unauthorised party accessed it.
This incident comes at a time when India is already gripped by the CBSE On-Screen Marking controversy, in which the government transferred both the CBSE Chairman and Secretary and launched an official inquiry into the procurement of the marking system. The back-to-back breaches across the country’s most high-stakes examinations have triggered demands for accountability from opposition parties and education watchdogs alike, raising fundamental questions about the security architecture governing millions of students’ futures.
