The Indian Institute of Technology (IIT) Roorkee has strongly denied allegations of a data breach in the JEE (Advanced) examination system, labeling the claims as 'misleading and factually incorrect'. The clarification comes days after a cybersecurity researcher reported that personal and examination-related details of JEE (Advanced) aspirants were accessible due to a cloud storage misconfiguration.
Official Response from IIT Roorkee
In an official statement, IIT Roorkee asserted that the claims made by the researcher are baseless and lack factual evidence. The institute emphasized that robust security measures are in place to protect candidate data and that no unauthorized access or data leak has occurred. 'The allegations are completely unfounded and do not reflect the actual state of our systems,' the statement read.
Background of the Allegations
The controversy began when a cybersecurity expert claimed that a misconfigured Amazon Web Services (AWS) S3 bucket exposed sensitive information of thousands of JEE (Advanced) applicants. The researcher alleged that details such as names, dates of birth, addresses, phone numbers, email IDs, and examination scores were publicly accessible. However, IIT Roorkee has dismissed these claims, stating that the researcher's findings were based on outdated or incorrectly interpreted data.
Security Measures and Data Protection
IIT Roorkee reiterated its commitment to data security and privacy. The institute employs multiple layers of encryption, access controls, and regular security audits to safeguard candidate information. 'Our IT infrastructure is designed to prevent any unauthorized access, and we continuously monitor for potential vulnerabilities,' the statement added. The institute also urged candidates to rely only on official communications for accurate information.
Impact on Candidates
Despite the denial, the allegations have caused concern among JEE (Advanced) aspirants and their families. Many candidates have expressed anxiety over the security of their personal data. However, IIT Roorkee has assured that no candidate data has been compromised and that the examination process remains secure and transparent.
The institute has also advised candidates to report any suspicious activities or communications to the official JEE (Advanced) helpline. 'We urge all stakeholders to remain calm and not fall prey to unverified claims,' the statement concluded.
As of now, no official investigation has been launched, but IIT Roorkee has indicated that it will take necessary legal action against those spreading false information. The incident highlights the growing concerns around data security in high-stakes examinations in India.



