TG-iPASS portal services disrupted since October 22 after suspected ransomware attack

Hyderabad: The single-window portal for industrial clearances, TG-iPASS, has suffered a suspected ransomware attack, disrupting services since October 22.
Officials found that the portal’s database had been encrypted and file names altered with the extension ‘vgb’.

A ransom note was also reportedly discovered on the server, raising suspicions of a ransomware attack.

However, the hackers have reportedly not demanded any money and have provided only an email address for communication.

The Telangana Cyber Security Bureau has started investigation following a complaint lodged by the Industries Department’s joint director.

A case has been registered under Sections 43 and 66 of the Information Technology Act.

Investigation officials are conducting forensic examination of the affected server to determine whether any data was stolen or transferred outside the system. The extent of the security breach and the possible compromise of sensitive information are yet to be established.

The disruption has affected the processing of industrial permissions through TG-iPASS, a key platform used by businesses to obtain government clearances. Industries Department officials, however, said data backups were available.

Technical teams have initiated restoration efforts, with officials aiming to bring the portal back online soon.