New Delhi, March 12 -- The Indian Council of Medical Research (ICMR) had multiple security gaps including insecure application design and inadequate security controls, the Indian Computer Emergency Response Team (Cert-In) found after it received threat intelligence reports about the sale of personal data from ICMR in October 2023, the IT ministry had informed the parliamentary standing committee on communications and information technology in its Action Taken Notes submitted on January 7, according to the report tabled by the committee on Tuesday.

The committee, in turn, wants to know about the analysis report shared with law enforcement agency for investigation, and if the security gaps have been addressed and the number of data breaches ...