Scripts, Censor Records of Over 500 Films Leaked in CBFC Data Breach
Confidential documents linked to more than 500 films have reportedly been leaked from the Central Board of Film Certification’s (CBFC) e-Cinepramaan portal, raising concerns about the security of sensitive film industry data.
The leak, reported on October 25, 2026, involves documents allegedly obtained by breaching the portal and made available for download on the Internet Archive. The cause of the breach, including whether it resulted from a technical vulnerability or a wider cyberattack, remains under investigation.
What Information Was Leaked?
The incident reportedly involves confidential documents rather than complete film prints. The exposed material includes original scripts, story details, censorship records, cut orders, commercial agreements, distribution deals and information about licensing fees.
The e-Cinepramaan portal is used to process film certification applications. The reported breach has raised questions about how securely the system stores and protects sensitive information submitted by filmmakers and production companies.
How Could the Leak Affect Filmmakers?
The exposure of confidential scripts and storylines could spoil key plot points in upcoming releases, particularly thrillers and suspense films. If major twists or climaxes circulate on social media before a film reaches theatres, audience interest and box office prospects could suffer.
The leak of commercial agreements and distribution deals could also weaken the negotiating position of producers and distributors. Details of licensing fees and other financial arrangements becoming public could complicate future business negotiations and affect commercial strategies.
There are also concerns about the potential misuse of the stolen information. Filmmakers could face attempts at blackmail or ransom demands, although no such incidents have been established in connection with the reported breach.
What Steps Have Been Taken?
According to the report, the CBFC has initiated an internal investigation and a security audit of the portal. The Internet Archive has reportedly undertaken to remove the suspicious account that uploaded the material and lodge a cybercrime complaint.
India’s national cyber security agency, the Indian Computer Emergency Response Team (CERT-In), has also been informed about the incident.
The investigation is ongoing, and the precise cause and extent of the breach remain unclear. The incident has renewed concerns about the protection of confidential documents held on government portals and the need for stronger safeguards against unauthorised access.
