Delhi Police files FIR over cyberattacks on CBSE portal; no data breach confirmed
Synopsis
CBSE's Post-Result Services Portal was hit by coordinated cyberattacks on the very day it opened for student re-evaluation applications — yet held firm. Delhi Police have now filed an FIR with the elite IFSO unit, with IIT Kanpur, IIT Madras, CERT-In and I4C among the agencies that helped repel the breach. No data was compromised, but the timing and coordination of the attack has the Board calling it 'potentially inimical to national interest.'
Key Takeaways
Delhi Police registered an FIR on 5 June after CBSE reported coordinated cyberattacks on its Post-Result Services Portal .
The attacks began on 2 June , the same day the portal opened for verification and re-evaluation applications at 7 am .
Authorities confirmed no data breach or unauthorised access occurred; all systems remain secure.
The FIR has been filed with the Intelligence Fusion and Strategic Operations (IFSO) Unit under the IT Act .
Defence was supported by IIT Kanpur , IIT Madras , CERT-In , I4C , and the Digital India Corporation .
CBSE described the attacks as 'potentially inimical to national interest' and has sought legal action against those responsible.
Delhi Police on Friday, 5 June registered a First Information Report (FIR) after the Central Board of Secondary Education (CBSE) reported a series of coordinated cyberattacks targeting its Post-Result Services Portal — a critical platform used by lakhs of students across India for verification and re-evaluation applications. Authorities confirmed that no data breach or compromise of CBSE systems occurred.
How the Attack Unfolded
The portal came under attack on 2 June, coinciding with the launch of the verification and re-evaluation application process. According to CBSE, the platform went live at 7 am on that date and remained fully operational despite multiple cyberattack attempts throughout the day. Services continued without disruption, ensuring uninterrupted access for students and other users.
Preliminary assessment indicates the attackers sought to destabilise the platform, block legitimate access, and attempt unauthorised extraction of information. The Board described the attacks as 'potentially inimical to national interest.'
FIR Filed with IFSO Unit
The CBSE formally approached the police on Thursday, 4 June, after detecting repeated and coordinated interference attempts. The complaint was lodged with the Intelligence Fusion and Strategic Operations (IFSO) Unit of Delhi Police, and the FIR has been registered under relevant provisions of the Information Technology (IT) Act. Given the scale and coordinated nature of the attacks, the Board sought a detailed investigation and legal action against those responsible.
Cybersecurity Response
The attempted breaches were effectively mitigated through round-the-clock monitoring and response mechanisms. CBSE confirmed that its systems and databases remain secure, with no evidence of unauthorised access or data leakage. The defence effort was supported by cybersecurity teams from IIT Kanpur, IIT Madras, the Digital India Corporation, the Indian Cyber Crime Coordination Centre (I4C), CERT-In, and other central government agencies.
Why It Matters
The CBSE Post-Result Services Portal serves lakhs of students annually, and any sustained disruption could trigger large-scale inconvenience, delay re-evaluation outcomes, and affect stakeholders across the country. Notably, the timing of the attack — on the very day the portal opened for post-result applications — suggests a deliberate effort to maximise disruption at peak usage. This incident underscores the growing vulnerability of high-traffic government education platforms to coordinated digital threats. With investigations now under way, authorities are expected to pursue both the origin and the motive of the attacks.
Point of View
On the morning it opened for re-evaluation applications. That level of coordination suggests either prior reconnaissance or an insider tip — something the IFSO investigation will need to establish. The fact that IIT Kanpur, IIT Madras, CERT-In, and I4C were all mobilised points to a threat the Board considered serious enough to warrant national-level response, even as it publicly downplayed impact. India's high-stakes education portals — handling crores of student records — remain among the most attractive and least hardened targets in the country's digital infrastructure. This FIR is a necessary step, but the deeper question is whether CBSE and peer boards have invested sufficiently in proactive security architecture rather than reactive crisis response.
NationPress
12 Aug 2026
Frequently Asked Questions
What happened to the CBSE Post-Result Services Portal?
The CBSE Post-Result Services Portal was targeted by a series of coordinated cyberattacks beginning on 2 June 2025, the same day it opened for student verification and re-evaluation applications. Despite multiple attack attempts, the portal remained fully operational and no data was compromised.
Has any CBSE student data been leaked or stolen?
No. CBSE and Delhi Police have confirmed there was no breach or compromise of data or systems. The Board stated there is no evidence of unauthorised access or data leakage, and all databases remain secure.
Who is investigating the CBSE cyberattack?
The case has been handed to the Intelligence Fusion and Strategic Operations (IFSO) Unit of Delhi Police, a specialised cybercrime investigation body. An FIR has been registered under relevant provisions of the IT Act.
Which agencies helped defend the CBSE portal?
Cybersecurity teams from IIT Kanpur, IIT Madras, the Digital India Corporation, the Indian Cyber Crime Coordination Centre (I4C), and CERT-In, along with other central government agencies, supported CBSE's round-the-clock monitoring and response efforts.
Why is the timing of the attack significant?
The attacks began on 2 June, precisely when the portal launched for post-result services — a high-traffic period when lakhs of students attempt to access the platform simultaneously. CBSE said any successful disruption could have caused large-scale inconvenience and described the attacks as 'potentially inimical to national interest.'
