Hacked CCTV videos from a maternity hospital in India have been sold on Telegram, police say, raising serious questions about privacy and security in a country where such cameras have become commonplace.
Earlier this year, police in Gujarat state were alerted by the media to videos on YouTube - some showed pregnant women undergoing medical exams and receiving injections - in a maternity hospital. The videos had a link directing viewers to Telegram channels to buy longer videos.
The director of the hospital stated that the cameras were installed for doctors' safety. The BBC is not naming the city or hospital to protect the identity of women in the footage, as none have filed a police complaint.
Police reported that their investigation uncovered a massive cybercrime racket, revealing that sensitive footage from at least 50,000 CCTVs across the country had been stolen by hackers and sold online.
CCTVs have become ubiquitous in India, especially in urban areas, yet experts warn that poorly installed or managed systems can infringe on privacy. Many domestic camera models are reportedly vulnerable to exploitation due to lack of proper cybersecurity training among the staff handling them.
In a related incident, a tech worker in Bengaluru had his webcam hacked in 2018 and was extorted with threats of releasing his private videos. Furthermore, domestic surveillance systems proved inadequate even this year when a YouTuber discovered his home CCTV had been hacked and private footage went viral.
Following the rising incidents of hacking, the federal government advised states against procuring CCTVs from suppliers with a history of data breaches. Despite these warnings, hacking continues to pose a significant threat.
In Gujarat, police also uncovered a sprawling network of individuals engaging in CCTV hacking, compromising systems in hospitals, schools, colleges, and private residences nationwide. Videos were reportedly sold for 800–2,000 rupees ($9-22), with Telegram channels offering live feeds by subscription.
Police have initiated legal proceedings for various offenses, including violating female patient privacy and voyeurism, arresting several suspects from multiple states including Maharashtra and Uttar Pradesh.
Cybersecurity experts warn that weakly protected networks make easy targets for hackers. Changing default passwords and IP addresses, along with regular cybersecurity audits, is crucial to safeguarding these surveillance systems.
Victims often fear coming forward, fearing exposure and societal backlash, which perpetuates the cycle of privacy invasions. As the prevalence of surveillance technology grows, so does the imperative for robust security measures and public discourse on privacy rights.
