Personal data of more than 1.5 million Indian students from the 2026 Common University Entrance Test (CUET-UG) and other exams is being sold online through over 1,000 databases, according to medianama.com. The data, spanning nearly a decade, includes recent batches from 2026 exams and is available for prices such as Rs 6,999 for CUET-2026 records.
Medianama verified the accuracy of the leaked data by contacting over ten individuals listed in a sample file of more than 500 student records. Six respondents confirmed their information matched the database and were unaware their data was being sold. The investigation identified at least three websites selling personally identifiable information (PII) from these exams but did not disclose their names to prevent further exploitation.
This leak highlights significant vulnerabilities in the protection of sensitive student information in India’s education system. The scale of the breach, covering data from at least 41 distinct 2026 examination and institute databases, raises concerns about data security practices. Such incidents could potentially expose students to identity theft and fraud, underscoring the need for stronger data governance in educational institutions.
Medianama’s analysis used AI tools to process the vast amount of leaked data, confirming the scope and scale of the breach. The report serves as a documented case of large-scale PII exposure affecting Indian students in 2026, with no immediate resolution or containment measures publicly announced.