responsible-disclosure

(3)

security data-exposure s3 healthcare dpdp

A doctor filling out a patient's medical report on a clipboard

Jul 28, 2026•7 min read

I Could Read 19,000 Strangers' Lab Reports by Changing One Number

A family member's lab report link had a number in it. Change the number, get someone else's medical report. About 19,000 patients' health records were sitting in a public S3 bucket. I reported it. They fixed it silently and never replied.

Read article

securityresponsible-disclosure

May 2, 2026•5 min read

How District (by Zomato) Paid Me $500 During IPL Season

While trying to book IPL tickets on District, I found the queue-system secret sitting in plain sight on the page. With it, anyone could jump the line and mint tickets at will. Reported it, got a $500 bounty.

Read article

Cybersecurity and data protection concept

securityresponsible-disclosure

Apr 10, 2025•3 min read

I Found Security Flaws in BTP's ASTRAM App and Got It Fixed

Opened Proxyman, saw some sketchy stuff in Bangalore Traffic Police's new app, tweeted about it, and the Joint CP slid into my DMs.

Read article