VULNpocalypse
MediumBreach / campaignMonitoring

The Hindu reports CBFC e-Cinepramaan application data exposed on Internet Archive

The Hindu reports CBFC e-Cinepramaan filings for over 500 titles sat exposed on the Internet Archive; applicants should review what they filed.

Published
Exploitation
No, The Hindu reports the data was publicly exposed, but misuse is not confirmed

What happened

According to The Hindu, application data submitted to the Central Board of Film Certification (CBFC) was found exposed online. The Hindu says it found complete application forms from filmmakers on the Internet Archive. These forms included commercially sensitive distribution agreements.

The Hindu reports these details:

  • The data covers over 500 titles, and dozens of them are feature films.
  • The data comes from e-Cinepramaan, the portal filmmakers use to submit applications to the censor board.
  • The records date from December 2025 to August 2026.
  • The leaked documents included shooting scripts with detailed shot-by-shot translations and other annotations. The Hindu says these scripts appear to have been prepared specifically for the censor board’s review. One script labelled the swear words used in the film.

The following points are not confirmed in the source:

  • How the data reached the Internet Archive.
  • Whether the material has been removed.
  • Any response from CBFC.
  • Whether personal contact or identity data was included.
  • Whether anyone has misused the data.

Am I affected?

You may be affected if you or your company submitted an application to CBFC through e-Cinepramaan during the period The Hindu reports, December 2025 to August 2026 (The Hindu).

The source does not include a list of the affected titles or a way to check whether a specific title is affected.

What to do now

  1. List the documents you submitted through e-Cinepramaan in that period. Note any scripts and distribution agreements, which The Hindu reports were among the exposed material.
  2. Ask CBFC whether your application was part of the exposure. An official CBFC statement is not confirmed in the source.
  3. Tell distribution partners whose agreements were attached to your applications, so they know the terms may be public.
  4. Watch for an official statement from CBFC or a follow-up report from The Hindu before you assume the scope is final.

Sources