A hacker group calling itself Scarlettgroup claims it has breached Rajasthan Police systems, according to a report published by The CSR Journal on Wednesday, October 21, citing the cybersecurity monitoring account FalconFeedsio on X, which first flagged the claim publicly.
According to that report, the group says — in a post on BreachForums, a dark-web forum — that it is offering stolen data for sale. The hackers claim the material includes around 70,000 identity records (yaani about 0.7 lakh records) and 59,000 mobile numbers, along with attachments totalling about 6.63 GB said to contain FIRs, eKYC records, witness statements, identity cards, pay slips, bank statements and circulars, including emails said to belong to senior officers. The group is reported to have shared redacted sample images, but no price was disclosed. All of these details are the hackers' own claims and have not been independently confirmed.
Separately, ransomware-tracking services have listed the official Rajasthan Police domain, police.rajasthan.gov.in, as a claimed victim of Scarlettgroup. The tracker Ransomware.live says it discovered the listing on October 21, while RedPacket Security notes the leak-site post was dated October 14 and stresses that the listing gives no account of any intrusion, no data volume and no samples — so it does not by itself establish that a breach took place. Cybersecurity analysis site Undercode News likewise concludes that the listing is an unverified extortion claim and that a successful compromise of Rajasthan Police systems has not been established.
As of publication, Rajasthan Police has issued no official statement on the claims, and there is no independent confirmation that any police data was stolen or that the material being offered actually came from Rajasthan Police systems, The CSR Journal reported.
Known: two separate reporting streams (a BreachForums sale claim flagged by FalconFeedsio and reported by The CSR Journal, and ransomware trackers listing police.rajasthan.gov.in) name Scarlettgroup and Rajasthan Police. Not known: whether any breach actually happened, and whether the claimed 70,000 records are genuine. No official confirmation exists yet.
What is solid
- Scarlettgroup has publicly named Rajasthan Police / police.rajasthan.gov.in in cyber-extortion listings, per ransomware trackers and The CSR Journal's report citing FalconFeedsio.
- Rajasthan Police has issued no official statement on the claims as of October 21.
- Ransomware trackers say the leak-site listing itself provided no data volume, file inventory or sample files.
What is only claimed
- The hackers' claim that about 70,000 identity records, 59,000 mobile numbers and 6.63 GB of documents including FIRs and eKYC records were stolen and are for sale — unverified.
- Whether Scarlettgroup actually compromised Rajasthan Police systems at all — analysis cited by Undercode News says this is not established.
If the claims were to prove accurate, stolen identity and case documents could be misused for identity theft and fraud, The CSR Journal noted. Readers should treat messages or calls citing police records with caution until an official statement clarifies the position. Awaaz Punjab will update this story if Rajasthan Police or a government cybersecurity agency confirms or denies the claim.