Incident
1
Taliban's capture of biometric devices puts communities at risk
2
Hacker claims to have stolen data of Argentina's entire population
3
Haitian descendants blocked from citizenship and IDs
4
2019 data exposure of the entire population
5
Exposure of e-IDs to identity theft
6
Hacker accesses ID photos of nearly 300,000 Estonians
7
42% of Particularly Vulnerable Tribal Groups impacted by Aadhaar-related issues
8
HIV positive patients fearing data leaks stop seeking treatment
9
Biometric changes resulting in denial of welfare
10
2018 report on Aadhaar-linked personal data sold online
11
Misuse of Aadhaar data by telco
12
Death of mother and babies due to denial of hospital care
13
Death of child due to Aadhaar and welfare cards not being linked
14
AI facial recognition failures deny mothers and children food
15
Rohingya refugees' Aadhaar access blocked and denied
16
e-KTP corruption scandal
17
Corruption in the World-Bank funded ID project
18
Supreme Court rules mandatory biometric-ID is unconstitutional
19
Linking IDs to healthcare leave thousands without proper access
20
Court rules digital ID data collection is unconstitutional on privacy grounds
21
Risks to statelessness and discrimination against Nubians being entrenched in ID design
22
Mexico's central ID system and military access
23
Exclusion of Rohingya and state-imposed identities
24
Failure to link mobile connections with IDs sees 73 million disconnections
25
Citizen data allegedly offered to US government
26
2.7 million citizens' data compromised
27
Exclusion due to patriarchal norms being encoded in digital IDs
28
Identity theft and selling of personal data
29
Security errors expose e-signatures
30
Digital IDs unfairly blocked
31
Petition filed against the e-NIC project
43 rows
Description
Country
Sources
Types of Harms & Risks

Human rights groups cautioned that the Taliban's capture of biometric devices left by the US military, and access to donor-supported biometric ID systems (e.g., by UN agencies and the World Bank) used...

Afghanistan
1. https://www.article19.org/resources/international-actors-afghanistan-secure-digital-identity-biometric-data-immediately/ 2. https://theintercept.com/2021/08/17/afghanistan-taliban-military-biometrics/ 3. https://www.hrw.org/news/2022/03/30/new-evidence-biometric-data-systems-imperil-afghans 4. https://theconversation.com/afghanistans-taliban-reportedly-have-control-of-us-biometric-devices-a-lesson-in-life-and-death-consequences-of-data-privacy-166465
Surveillance
Violation of Privacy
Denial of Service or Entitlement
Data Misuse
Discrimination

In 2021, a hacker breached the Argentinian government's IT network and claimed to have stolen ID card details for the country's entire population. Data was reportedly being sold in private circles. Of...

Argentina
1. https://therecord.media/hacker-steals-government-id-database-for-argentinas-entire-population 2. https://www.bitdefender.com/en-us/blog/hotforsecurity/hacker-says-he-stole-id-data-of-45-million-argentinians
Security Vulnerabilities
Violation of Privacy

In 2013, a Constitutional Tribunal ruling retroactively stripped thousands of persons of Haitian descent of their Dominican citizenship. Eva Hayes de Kalaf's book, *Legal Identity, Race and Belonging...

Dominican Republic
1. https://theconversation.com/how-some-countries-are-using-digital-id-to-exclude-vulnerable-people-around-the-world-164879
Entrenching Statelessness
Denial of Service or Entitlement
Discrimination
Unfair Blocking

Security company vpnMentor found that sensitive personal data of the entire population, including 6.7 million children, was exposed on an unsecured server owned by Ecuadorian company Novaestrat.

Ecuador
1. https://www.vpnmentor.com/blog/cybersecurity/report-ecuador-leak/ 2. https://www.bbc.com/news/technology-49715478 3. https://www.zdnet.com/article/database-leaks-data-on-most-of-ecuadors-citizens-including-6-7-million-children/
Security Vulnerabilities

IT security researchers discovered an encryption vulnerability, known as ROCA (Return of the Coppersmith Attack), associated with the chips used in Estonia's IDs that allowed for malware-based attacks...

Estonia
1. https://securityaffairs.com/65129/digital-id/estonia-suspends-certificates.html 2. https://govinsider.asia/intl-en/article/estonias-digital-id-shutdown-brings-security-to-the-spotlight 3. https://www.ria.ee/sites/default/files/documents/2022-11/Roca-vulnerability-and-eID-lessons-learned-2018.pdf
Security Vulnerabilities

A hacker was able to obtain the ID photos of almost 300,000 people. The police arrested an Estonian citizen whose computer was used to commit the theft.

Estonia
1. https://inplp.com/latest-news/article/data-breach-in-the-estonian-information-system-authority-results-in-photos-of-almost-300000-people-stolen/ 2. https://therecord.media/estonia-says-a-hacker-downloaded-286000-id-photos-from-government-database
Security Vulnerabilities
Violation of Privacy

A survey on 325 Particularly Vulnerable Tribal Groups found that 42% faced problems with Aadhaar. As a result, many went hungry for months without access to welfare.

India
1. https://thewire.in/rights/aadhaar-is-depriving-jharkhands-particularly-vulnerable-tribes-of-ration-survey 2. https://x.com/roadscholarz/status/1069616123518189571
Authentication Failure
Denial of Service or Entitlement
Discrimination

HIV positive patients reportedly stopped seeking treatment due to fears that linking their identities to Aadhaar would expose their status. Although not mandatory, antiretroviral therapy centres encou...

India
1. https://scroll.in/pulse/857656/across-india-hiv-positive-people-drop-out-of-treatment-programmes-as-centres-insist-on-aadhaar 2. https://genderit.org/articles/citizen-data-and-freedom-fears-people-living-hiv-india
Violation of Privacy
Discrimination
Denial of Service or Entitlement

The Public Accounts Committee raised concerns over high rates of failure associated with Aadhaar biometric verification. Due to these failures, eligible beneficiaries were excluded from social welfare...

India
1. https://www.biometricupdate.com/202507/high-rates-of-aadhaar-biometric-verification-failure-leads-to-uidai-scrutiny 2. https://scroll.in/latest/1084659/parliamentary-panel-asks-uidai-to-review-aadhaar-database-flags-security-concerns
Authentication Failure
Discrimination
Denial of Service or Entitlement

In 2018, an article in the Tribune claimed that Aadhaar data could be bought online for less than £6. For a similar fee, it was said that software to print out Aadhaar cards could be purchased. The Un...

India
1. https://www.theguardian.com/world/2018/jan/04/india-national-id-database-data-leak-bought-online-aadhaar 2. https://www.bbc.com/news/world-asia-india-42575443 3. https://www.ndtv.com/india-news/aadhar-breach-risks-identity-theft-for-1-billion-indians-foreign-media-1796162 4. https://www.pib.gov.in/PressReleasePage.aspx?PRID=1515503&reg=3&lang=2
Security Vulnerabilities
Violation of Privacy

The Unique Identification Authority of India temporarily barred Bharti Airtel and Airtel Payments after allegations emerged that Bharti Airtel made use of Aadhaar-linked eKYC (electronic Know Your Cu...

India
1. https://privacyinternational.org/examples-abuse/2289/large-telco-secretly-opens-bank-accounts-using-aadhaa-linked-ekyc 2. https://timesofindia.indiatimes.com/business/india-business/uidai-temporarily-bars-airtel-from-conducting-aadhaar-linked-e-kyc-verification/articleshow/62096727.cms
Data Misuse

A woman and her twin babies died after allegedly being denied treatment at the hospital, as she was not carrying an Aadhaar card or a maternity card issued by the government.

India
1. https://scroll.in/latest/1036621/karnataka-woman-her-twin-babies-die-after-hospital-refuses-treatment-for-not-carrying-aadhaar 2. https://timesofindia.indiatimes.com/city/mysuru/turned-away-by-tumakuru-govt-hospital-mom-twin-newborns-die/articleshow/95287187.cms
Denial of Service or Entitlement

Reports claim that an 11-year-old girl named Santoshi Kumari died of hunger because her family's ration card was not linked to Aadhaar. Officials have denied that Santoshi died of starvation and said...

India
1. https://www.reuters.com/article/world/death-of-11-year-old-in-india-sparks-debate-on-tying-welfare-to-identity-card-idUSKBN1CN286/ 2. https://scroll.in/article/895667/a-year-after-jharkhand-girl-died-of-starvation-aadhaar-tragedies-are-on-the-rise 3. https://www.theguardian.com/technology/2019/oct/16/glitch-india-biometric-welfare-system-starvation
Denial of Service or Entitlement
Discrimination

An investigative report by Decode found that failures in AI facial recognition, which is linked to Aadhaar biometrics, have left half of eligible pregnant and nursing mothers without rations by the en...

India
1. https://www.boomlive.in/decode/ai-facial-recognition-is-denying-food-to-pregnant-women-across-india-30878?fbclid=IwY2xjawQy-plleHRuA2FlbQIxMQBicmlkETFEbmFmdlp4ZTNNYkhGVk9Kc3J0YwZhcHBfaWQQMjIyMDM5MTc4ODIwMDg5MgABHrXuKYIoddiTYeTB-KS96W3OoHtvD23AAE91nyc3uyvge5xjl2tn9QBznZzZ_aem_ONOWXXbUQwAyMGMmTIMjuw
Authentication Failure
Denial of Service or Entitlement

Rohingya communities living as refugees in India initially held UNHCR Refugee Cards that enabled them to obtain Aadhaar cards. At that time, Aadhaar was seen as a means of social inclusion. However, a...

India
1. https://www.fmreview.org/digital-disruption/brinham-johar/ 2. https://www.fmreview.org/digital-disruption/brinham-johar/
Entrenching Statelessness
Discrimination
Denial of Service or Entitlement
Unfair Blocking

Indonesia's electronic ID, known as e-KTP (Electronic-Kartu Tanda Penduduk), was mired in a corruption scandal involving senior politicians and trillions of public funds (about IDR 2.3 trillion). Amid...

Indonesia
1. https://asiatimes.com/2018/04/many-more-to-fall-in-indonesias-e-ktp-scam/ 2. https://antikorupsi.org/en/article/exposing-e-ktp-corruption-scandal 3. https://antikorupsi.org/en/article/corruption-trails-e-ktp-case 4. https://observerid.com/tyrany-of-secrecy-the-e-ktp-mega-corruption-case-money-power-and-greed/
Corruption
Denial of Service or Entitlement

The World Bank's Identification System for Enhancing Access to Services (IDEA) Project in Bangladesh, amounting to USD 195 million, was embroiled in collusive practices and bribery. The Bank eventuall...

Indonesia
1. https://www.worldbank.org/en/news/press-release/2017/11/30/world-bank-announces-settlement-with-oberthur-technologies-sa 2. https://www.thedailystar.net/backpage/news/project-nid-system-wb-blacklists-tiger-it-corruption-1779634 3. https://documents1.worldbank.org/curated/en/980641572096094561/pdf/World-Bank-Group-Sanctions-System-Annual-Report-FY19.pdf 4. https://bdnews24.com/business/world-bank-sanctions-tigerit-over-bangladeshs-national-smartcard-project 5. https://documents1.worldbank.org/curated/en/613401551977533122/pdf/Bangladesh-BD-IDEA-Project.pdf
Corruption
Denial of Service or Entitlement
Security Vulnerabilities

The Supreme Court ruled that the country’s mandatory biometric ID project was unconstitutional and a violation of privacy. Drawing on reasoning from India’s Supreme Court ruling, Jamaica’s Supreme Cou...

Jamaica
1. https://thewire.in/law/jamaica-supreme-court-aadhaar-justice-chandrachud 2. https://supremecourt.gov.jm/sites/default/files/judgments/Robinson%2C%20Julian%20v%20Attorney%20General%20of%20Jamaica.pdf 3. https://dig.watch/updates/supreme-court-declares-jamaica-digital-id-unconstitutional
Violation of Privacy
Surveillance

Several issues have emerged with the 'My Number Card', especially with measures to link it to healthcare. Some issues include: a lack of knowledge among the public on how to link their cards to disabi...

Japan
1. https://www.theregister.com/2023/08/17/japanese_minister_offers_up_salary/ 2. https://www.biometricupdate.com/202308/japan-trying-to-get-it-right-with-national-digital-id-public-losing-faith 3. https://www.japantimes.co.jp/podcast/2023/08/10/deep-dive/my-number-digitalization/ 4. https://www.japantimes.co.jp/podcast/2023/08/10/deep-dive/my-number-digitalization/
Authentication Failure
Denial of Service or Entitlement

On 14 October 2021, the Kenyan High Court declared the rollout of the Huduma Namba (NIIMS) digital ID cards to be unconstitutional and invalid. The court ruled that the data collection was illegal for...

Kenya
1. https://www.justiceinitiative.org/newsroom/new-kenya-high-court-judgment-sets-important-precedent-for-digital-id-privacy-protections-and-processes 2. https://theconversation.com/why-kenyas-digital-id-roll-out-must-face-up-to-data-protection-risks-170721
Violation of Privacy

Long before the Kenyan Huduma Namba digital ID was introduced, existing IDs and processes reportedly discriminated against the Nubians and their recognition in Kenya. When plans for the digital ID wer...

Kenya
1. https://statelessnessandcitizenshipreview.com/index.php/journal/article/view/101/111 2. https://restofworld.org/2021/kenya-digital-id/
Entrenching Statelessness
Denial of Service or Entitlement
Discrimination

Mexico's proposal for a central digital ID database, Clave Única de Registro de Población (CUID), raised concerns among rights groups about potential surveillance. These escalated when legal reforms w...

Mexico
1. https://articulo19.org/ley-de-la-guardia-nacional-legaliza-la-vigilancia-sin-controles-por-parte-del-ejercito/ 2. https://www.courthousenews.com/mexico-approves-security-reforms-allowing-military-to-collect-personal-data/ 3. https://www.eff.org/deeplinks/2025/09/mexican-allies-raise-alarms-about-new-mass-surveillance-laws-call-international 4. https://restofworld.org/2021/the-dystopian-danger-of-a-mandatory-biometric-database-in-mexico/ 5. https://www.thomsonreuters.com/en-us/posts/government/mexico-biometric-curp/ 6. https://globalnetworkinitiative.org/expanding-state-surveillance-gni-raises-alarm-on-mexicos-new-telecommunications-and-security-laws/
Surveillance
Violation of Privacy

For stateless persons, such as the Rohingya community, the inability to obtain a digital ID entrenches their experience of stateleness. It limits their access to rights and essential services, such as...

Myanmar
1. https://seap.nationalityforall.org/digital-id/regional-overview/southeast-asia/myanmar/#designed-to-include 2. https://files.institutesi.org/Locked_In_Locked_Out_The_Rohingya_Briefing_Paper.pdf
Entrenching Statelessness
Denial of Service or Entitlement
Discrimination

A mandatory measure to link SIMs with IDs saw about 73 million SIMs being disconnected for failing to do so. People cite various reasons for not linking the systems, ranging from concerns over privacy...

Nigeria
1. https://www.reuters.com/article/business/media-telecom/feature-nigeria-blocks-73-million-mobile-phones-in-security-clampdown-idUSL5N2WA06Z/ 2. https://www.connectingafrica.com/regulation/nigeria-orders-73m-unregistered-sims-disconnected 3. https://www.ids.ac.uk/opinions/why-millions-of-africans-are-right-to-resist-mobile-sim-card-registration/
Surveillance
Denial of Service or Entitlement
Violation of Privacy

Claims surfaced based on a WikiLeaks revelation that Pakistani officials had offered Pakistan’s entire citizen biometric database, maintained by the National Database and Registration Authority (NADRA...

Pakistan
1. https://ifex.org/pakistan-governments-alleged-leaking-of-citizens-private-data-is-unacceptable/ 2. https://www.dawn.com/news/1338486
Surveillance
Data Misuse
Violation of Privacy
Undermining Data Sovereignty

A Joint Investiga­tion Team (JIT), which was formed to probe a data leak from the National Database and Registration Authority (NADRA), found that the data of about 2.7 million citizens had been compr...

Pakistan
1. https://www.dawn.com/news/1824026#:~:text=Iftikhar%20A.,took%20place%20in%20March%202023. 2. https://tribune.com.pk/story/2505330/nadra-officials-dismissed-over-security-breach 3. https://www.biometricupdate.com/202411/investigation-confirms-theft-of-2-7m-digital-id-records-in-pakistan
Security Vulnerabilities
Violation of Privacy
Corruption

Until a landmark ruling in 2022, Pakistani children of single mothers could not register for the country's digital ID scheme. Instead, individuals registering for digital IDs needed to show their fath...

Pakistan
1. https://www.aljazeera.com/news/2022/7/26/millions-in-pakistan-without-digital-id-card-rights-activists 2. https://www.biometricupdate.com/202207/inclusion-promise-of-id-documents-not-consistently-met-in-pakistan-el-salvador-reports-allege 3. https://www.wired.com/story/pakistan-digital-database-family-design/
Discrimination
Denial of Service or Entitlement

Reports surfaced that cybercriminals are selling stolen digital identities of Singaporeans on the Dark Web, with prices starting at $8. The stolen data contained biometric information, such as fingerp...

Singapore
1. https://www.resecurity.com/blog/article/cybercriminals-are-targeting-digital-identity-of-singapore-citizens 2. https://hackread.com/stolen-singaporean-identities-sold-on-dark-web/ 3. https://www.asiaone.com/singapore/stolen-singaporean-digital-identities-sold-dark-web-8-huge-spike-such-data-being-offered
Violation of Privacy
Security Vulnerabilities

300,000 IDs bearing certificates for e-signatures contained security errors through which the electronic signatures of individuals could be stolen.

Slovakia
1. https://spectator.sme.sk/politics-and-society/c/e-id-cards-have-serious-problem 2. https://enrsi.stvr.sk/articles/news/145779/slovak-id-card-security-risk-exposed
Security Vulnerabilities

Nearly 2 million digital IDs were blocked by the government, which deemed them 'suspicious'. In January 2024, the High Court of South Africa ruled that the move was unconstitutional.

South Africa
1. https://www.institutesi.org/news/south-africas-high-court-declares-id-blocking-unjust-and-unconstitutional 2. https://centreforchildlaw.co.za/wordpress21/wp-content/uploads/2024/04/Digital-Booklet-Has-Your-ID-Been-Blocked.pdf 3. https://www.saflii.org/za/cases/ZAGPPHC/2024/2.pdf 4. https://www.lhr.org.za/lhr-news/press-statement-home-affairs-practice-of-id-blocking-declared-unconstitutional/
Unfair Blocking
Denial of Service or Entitlement

In 2017, a Fundamental Rights petition was filed by M.R. Ratnasabapathy against Sri Lanka's electronic National Identity Card (e-NIC) project. The petitioner argued that the project granted wide power...

Sri Lanka
1. https://www.sundaytimes.lk/171112/news/e-nics-fr-petition-on-alleged-invasion-of-privacy-268241.html 2.https://www.dailymirror.lk/print/news-features/e-NIC-project-to-come-into-operation-amidst-concerns/131-140222
Surveillance
Violation of Privacy
Data Misuse