Breaches and incidents
Central Board of Film Certification (India): eCinePramaan documents for 500+ films leaked online
The Hindu reported (Sunday 25 Oct) that shooting scripts, CBFC cut lists and distribution agreements (some with payment amounts not fully redacted) for...
- Disclosed
- Verification
- Confirmed by two or more outlets
What happened
- The Hindu reported (Sunday 25 Oct) that shooting scripts, CBFC cut lists and distribution agreements (some with payment amounts not fully redacted) for more than 500 titles, covering December 2025 to August 2026, had been posted on the Internet Archive until they were taken down on 12 Oct; film video files were not leaked (ThePrint, Deccan Chronicle). The uploader used former CBFC chairman Prasoon Joshi’s name written in Russian; ThePrint notes no link to Joshi is established.
- Root cause: not established. The documents are submissions to the eCinePramaan certification portal; how they were obtained is unclear.
- Attacker: unknown.
- Response: CBFC said it “reviewed the information shared regarding alleged unauthorised access to CBFC’s eCinePramaan Portal” and that “no trace has been found of the certification-related documents”; it filed a cybercrime complaint, informed CERT-In, found no sign of external attack on servers or of filmmakers’ accounts being misused, and committed to a “thorough security audit”. Telugu producers raised confidentiality concerns.