Hacked CCTV footage from Indian maternity hospital sold on Telegram

Police in Gujarat, India, have uncovered a massive cybercrime operation involving the theft and sale of hacked CCTV footage from hospitals, schools, and private homes. Earlier this year, media reports alerted police to videos on YouTube showing women in a maternity hospital undergoing medical exams and injections. The videos were linked to Telegram channels where longer clips were sold. Authorities have now traced the footage to a network of hackers who accessed at least 50,000 CCTV systems across the country.

The director of the affected maternity hospital told the BBC that cameras were installed for doctor safety, and none of the women in the videos have filed a police complaint.

Police investigation revealed that the hackers were selling videos for 800–2,000 rupees ($9-22), with live feeds offered via subscription. Police have arrested eight individuals, but the case remains ongoing.

Cybercrime expert Ritesh Bhatia warned that weakly secured CCTV systems, especially those with default passwords, are easy targets for hackers.

"Once a system is connected to the web, it's easy for hackers to decode its IP address and default password," Bhatia explained.

He advises users to change default passwords and conduct regular cybersecurity audits.

In response to the growing concerns, the Indian government introduced new rules in 2023 to strengthen the security of CCTV systems. However, incidents of hacking continue to be reported, as many cameras are still handled by staff without cybersecurity training. Audrey Dmello, a legal advocate for women's rights, highlighted the privacy violations, noting that many CCTVs are installed without consent, especially in sensitive spaces like hospitals.

Police have charged the accused with various offenses, including violating privacy, voyeurism, and cyber terrorism. Despite the severity of the crime, female patients in the videos have been hesitant to come forward due to fear of identity exposure.

An officer involved in the investigation stated, "Female patients fear that their identity will be revealed. Therefore, they are not willing to lodge a complaint."

Experts, including Dmello, stress the importance of securing surveillance systems in sensitive areas.

"Organisations and institutions that set up surveillance systems, especially in sensitive spaces, must see to it that their systems are adequately secured," she said.

By Sabina Mammadli