Govt investigating reported Tata Electronics data leak, seeks explanation from WhatsApp over username feature: MeitY Secretary

New Delhi, [India], July 3 (ANI): The government has sought an explanation from WhatsApp over its username feature, saying it could facilitate cybercrime, while also investigating the reported data leak allegations involving Tata Electronics, Secretary, Ministry of Electronics and Information Technology (MeitY), S. Krishnan said on Friday.
Speaking on the sidelines of a CII Conference, Krishnan responded to an ANI question on government's concerns over WhatsApp, Signal and Telegram username feature, "The kind of encouragement that it provides or the facility it provides for committing more cybercrimes, which is a very serious issue... we have directed WhatsApp to explain why they have this feature and likewise we have similarly sought explanations from others," he said.
The government's concerns come amid growing scrutiny of username-based messaging features on encrypted platforms, with officials examining whether such functionalities could make it easier for cybercriminals to conceal identities, impersonate users or evade detection during online fraud and other cyber offences.
Responding to another ANI question on the reported Tata leaks, Krishnan said, "This is also a kind of cybercrime. We are investigating it....It has been reported to us."
The remarks come amid reports alleging a data leak involving Tata Electronics, a major supplier in Apple's global manufacturing supply chain that produces iPhone components in India.
Reports have claimed that sensitive internal information linked to the company was leaked online by threat actors. The government is examining the reported incident to ascertain its nature, extent and possible cybersecurity implications.
Responding on whether WhatsApp had sought additional time to respond to the government's queries, Krishnan said, "Not that I am aware of."
On whether the government was considering a legal framework for Virtual Private Networks (VPNs) to prevent users from accessing banned applications, Krishnan said the issue required both legal and technological interventions rather than relying solely on legislation.
"That is a techno-legal aspect. We have to look at both a technology solution in addition to just a legal solution," he said.
Krishnan said existing guidelines already require VPN service providers to register if they operate in India. However, he noted that some providers choose not to register and instead offer services from outside the country, making enforcement more challenging.
"There is a requirement even under certain guidelines currently for VPNs to register. What happens is many of them choose not to register. They offer it from elsewhere and it is offered at the software level and therefore we have to find technology-based solutions to address this," he said.
The MeitY Secretary said the government was examining the issue from both legal and technological perspectives to ensure that restrictions on applications are implemented effectively while addressing challenges posed by services operating outside India's jurisdiction. (ANI)