#FactCheck - "Viral Video Misleadingly Claims Surrender to Indian Army, Actually Shows Bangladesh Army”

Digital vulnerabilities like cyber-attacks and data breaches proliferate rapidly in the hyper-connected world that is created today. These vulnerabilities can compromise sensitive data like personal information, financial data, and intellectual property and can potentially threaten businesses of all sizes and in all sectors. Hence, it has become important to inform all stakeholders about any breach or attack to ensure they can be well-prepared for the consequences of such an incident.  

The non-reporting of reporting can result in heavy fines in many parts of the world. Data breaches caused by malicious acts are crimes and need proper investigation. Organisations may face significant penalties for failing to report the event. Failing to report data breach incidents can result in huge financial setbacks and legal complications. To understand why transparency is vital and understanding the regulatory framework that governs data breaches is the first step. 

The Current Indian Regulatory Framework on Data Breach Disclosure

A data breach essentially, is the unauthorised processing or accidental disclosure of personal data, which may occur through its acquisition, sharing, use, alteration, destruction, or loss of access. Such incidents can compromise the affected data’s confidentiality, integrity, or availability. In India, the Information Technology Act of 2000 and the Digital Personal Data Protection Act of 2023 are the primary legislation that tackles cybercrimes like data breaches. 

• Under the DPDP Act, neither materiality thresholds nor express timelines have been prescribed for the reporting requirement. Data Fiduciaries are required to report incidents of personal data breach, regardless of their sensitivity or impact on the Data Principal. 
• The IT (Indian Computer Emergency Response Team and Manner of Performing Functions and Duties) Rules, 2013, the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, along with the Cyber Security Directions, under section 70B(6) of the IT Act, 2000, relating to information security practices, procedure, prevention, response and reporting of cyber incidents for Safe & Trusted Internet prescribed in 2022 impose mandatory notification requirements on service providers, intermediaries, data centres and corporate entities, upon the occurrence of certain cybersecurity incidents. 
• These laws and regulations obligate companies to report any breach and any incident to regulators such as the CERT-In and the Data Protection Board.

The Consequences of Non-Disclosure

A non-disclosure of a data breach has a manifold of consequences. They are as follows:

• Legal and financial penalties are the immediate consequence of a data breach in India. The DPDP Act prescribes a fine of up to Rs 250 Crore from the affected parties, along with suits of a civil nature and regulatory scrutiny. Non-compliance can also attract action from CERT-In, leading to more reputational damage.
• In the long term, failure to disclose data breaches can erode customer trust as they are less likely to engage with a brand that is deemed unreliable. Investor confidence may potentially waver due to concerns about governance and security, leading to stock price drops or reduced funding opportunities. Brand reputation can be significantly tarnished, and companies may struggle with retaining and attracting customers and employees. This can affect long-term profitability and growth.
• Companies such as BigBasket and Jio in 2020 and Haldiram in 2022 have suffered from data breaches recently. Poor transparency and delay in disclosures led to significant reputational damage, legal scrutiny, and regulatory actions for the companies.

Measures for Improvement: Building Corporate Reputation via Transparency

Transparency is critical when disclosing data breaches. It enhances trust and loyalty for a company when the priority is data privacy for stakeholders. Ensuring transparency mitigates backlash. It demonstrates a company’s willingness to cooperate with authorities. A farsighted approach instils confidence in all stakeholders in showcasing a company's resilience and commitment to governance. These measures can be further improved upon by:

• Offering actionable steps for companies to establish robust data breach policies, including regular audits, prompt notifications, and clear communication strategies. 
• Highlighting the importance of cooperation with regulatory bodies and how to ensure compliance with the DPDP Act and other relevant laws. 
• Sharing best public communications practices post-breach to manage reputational and legal risks.

Conclusion

Maintaining transparency when a data breach happens is more than a legal obligation. It is a good strategy to retain a corporate reputation. Companies can mitigate the potential risks (legal, financial and reputational) by informing stakeholders and cooperating with regulatory bodies proactively. In an era where digital vulnerabilities are ever-present, clear communication and compliance with data protection laws such as the DPDP Act build trust, enhance corporate governance, and secure long-term business success. Proactive measures, including audits, breach policies, and effective public communication, are critical in reinforcing resilience and fostering stakeholder confidence in the face of cyber threats.

References

• https://www.meity.gov.in/writereaddata/files/Digital%20Personal%20Data%20Protection%20Act%202023.pdf 
• https://www.cert-in.org.in/PDF/CERT-In_Directions_70B_28.04.2022.pdf 
• https://chawdamrunal.medium.com/the-dark-side-of-covering-up-data-breaches-why-transparency-is-crucial-fe9ed10aac27 
• https://www.dlapiperdataprotection.com/index.html?t=breach-notification&c=IN

Pretext

The Army Welfare Education Society has informed the Parents and students that a Scam is targeting the Army schools Students. The Scamster approaches the students by faking the voice of a female and a male. The scamster asks for the personal information and photos of the students by telling them they are taking details for the event, which is being organised by the Army welfare education society for the celebration of independence day. The Army welfare education society intimated that Parents to beware of these calls from scammers.

The students of  Army Schools of Jammu & Kashmir, Noida, are getting calls from the scamster. The students were asked to share sensitive information. Students across the country are getting calls and WhatsApp messages from two numbers, which end with 1715 and 2167.  The Scamster are posing to be teachers and asking for the students’ names on the pretext of adding them to the WhatsApp Groups. The scamster then sends forms links to the WhatsApp groups and asking students to fill out the form to seek more sensitive information.

Do’s

• Do Make sure to verify the caller.
• Do block the caller while finding it suspicious.
• Do be careful while sharing personal Information.
• Do inform the School Authorities while receiving these types of calls and messages posing to be teachers.
• Do Check the legitimacy of any agency and organisation while telling the details
• Do Record Calls asking for personal information.
• Do inform parents about scam calling.
• Do cross-check the caller and ask for crucial information.
• Do make others aware of the scam.

Don’ts

• Don’t answer anonymous calls or unknown calls from anyone.
• Don’t share personal information with anyone.
• Don’t Share OTP with anyone.
• Don’t open suspicious links.
• Don’t fill any forms, asking for personal information
• Don’t confirm your identity until you know the caller.
• Don’t Reply to messages asking for financial information.
• Don’t go to a fake website by following a prompt call.
• Don’t share bank Details and passwords.
• Don’t Make payment over a prompt fake call.

Executive Summary

‍
A video is going viral on social media in which Defence Minister Rajnath Singh is seen allegedly saying, “During Operation Sindoor, we initially hid the losses of jets and soldiers so that Pakistan could not use them for propaganda. Later, a documentary was made to reveal the truth.” Research by the CyberPeace Research Wing found that the video is completely fake and was created using artificial intelligence (AI). Defence Minister Rajnath Singh never made any such statement. The video has primarily been circulated by Pakistani accounts. 

‍

Claim:

‍

A video of Rajnath Singh has been shared by a Pakistani user on the social media platform X, with the caption: “Rajnath Singh while commenting on Operation Sindoor documentary makes a starting revelation, Initially we did not admit any jet or soldier losses to avoid giving any propaganda chances for Pakistan but then we made this documentary to tell the truth.” The post link and screenshot are provided below.

https://x.com/i/status/2091095915021193252 

‍

‍

Fact Check:

‍

To investigate the viral claim, we first extracted keyframes from the video and conducted a reverse image search using Google Lens. During this process, we found the original video on ANI’s X account, in which Defense Minister Rajnath Singh can be seen saying: Defense Minister Rajnath Singh said, “The remarks made yesterday in the Lok Sabha by Leader of Opposition Rahul Gandhi regarding Prime Minister Narendra Modi and India’s foreign policy are extremely cheap and condemnable. Personally, this is painful for me as well. In my long political life, I have never seen such unbecoming and unthinkable behavior from any Leader of Opposition. Such conduct poses a serious threat to a healthy democracy. Rahul Gandhi may feel disappointment toward the Prime Minister, but such improper remarks are unacceptable—especially when PM Modi has elevated India’s national and international prestige and paved the way for a ‘Viksit Bharat’.

Working with complete dedication for 12 years, he has not taken a single day off. Such unbecoming remarks against such a Prime Minister pain every Indian I would also humbly like to ask the Congress Party: after such language and conduct, can it still claim the legacy of great stalwarts ranging from Lal-Bal-Pal and Gandhi, Patel, Nehru to Subhas Babu, Rajendra Babu, Shastri Ji, Narasimha Rao Ji, and Pranab Mukherjee? Through this behavior, Rahul Gandhi has not only insulted Prime Minister Narendra Modi but also damaged India’s international reputation. He has tarnished the dignity of the post of Leader of Opposition in the Lok Sabha. I cannot even imagine that anyone carrying the surname 'Gandhi' could make such a shameful remark.” Throughout the entire video, he never made the statement attributed to him in the viral claim. The post link and screenshot are provided below.

https://x.com/ANI/status/2088230045102002466 

‍

‍

We scanned the audio on the AI detection tool Resemble AI, where the results confirmed that the voice is AI-generated.

‍

‍

We also scanned the clip on another AI detection tool, Detect Video AI, where the results indicated that the viral video is 57 percent AI-generated.

‍

‍

Conclusion:

‍

Our research revealed that the viral video is completely fake and was created using Artificial Intelligence (AI). The research confirmed that Defense Minister Rajnath Singh made no such statement. It was also revealed during the fact-check that this fake video is being primarily circulated on social media through Pakistani accounts.

‍