Indian security firm Eioneus systems discovered a serious security flaw on 3rd Dec 2016 and it was reported by them immediately to CERT-IN, NIC, and other government sources which were felt necessary at the time. The bug gave access to information such as Provident fund balance, individuals KYC details, phone numbers, PAN numbers, bank details of every provident fund user in the country. The techfirm also disclosed some screenshots to prove they have access to databases.”]
Source: https://gbhackers.com/serious-security-flaw-employees-provident-fund-organisation-epfo/