Cyber Hygiene in India

Source: The Hindu

Why in News?

• Rising cyber frauds and data breaches across banking, government institutions and digital-certification agencies have highlighted weaknesses in India's cybersecurity ecosystem.
• According to the IBM 2026 report (August 2026), the average cost of a data breach in India reached ₹25.5 crore, registering a 15.9% year-on-year increase.
• Cyber hygiene is increasingly important for protecting India's expanding digital economy, financial infrastructure and citizens' personal data.

What is Cyber Hygiene?

• The term was coined by Internet pioneer Vinton Cerf in 2000 during his testimony before the US Congress' Joint Economic Committee.
• It refers to routine practices and preventive measures adopted to protect digital devices, networks, systems and personal information from cyber threats.
• It is considered the first line of defence against cybercrime.
• It follows the principle that prevention is more effective and less expensive than dealing with the consequences of cyberattacks.

Rising Cost of Data Breaches

• According to the IBM 2026 report, India's average data breach cost increased to ₹25.5 crore, up 15.9% from the previous year.
• An average breach compromised approximately 39,500 records, compared to 38,200 in the previous year.
• The financial services sector recorded an average breach cost of ₹40.9 crore.
• Globally, the average cost of a data breach declined by 9% year-on-year to $4.44 million, according to the IBM 2025 report.

Major Cybersecurity Concerns in India

• Banking Sector: Reported or suspected data exposures involving institutions such as SBI and HDFC Bank highlight risks to financial and personal information.
• Government Institutions: Security concerns involving the Central Board of Film Certification (CBFC) demonstrate vulnerabilities in public-sector digital infrastructure.
• Digital Certification: The eMudhra incident highlighted risks to digital trust mechanisms that support secure online communication and authentication.
• Identity Theft: Stolen personal information can be misused for impersonation, financial fraud and unauthorised access.
• Supply-Chain Vulnerabilities: Security weaknesses in third-party software, service providers and authentication systems can affect multiple interconnected organisations.

Rising Financial Cyber-Fraud Losses in India

• Financial cyber-fraud losses increased dramatically between 2021 and 2024, followed by a marginal decline in 2025.
• According to RBI data for FY2023–24, banks reported 36,075 fraud cases involving ₹13,930 crore.
• Of these, 29,082 cases were related to cards and internet banking, involving ₹1,457 crore.

Why Does India's Digital Growth Increase Cyber Risks?

• Digital Payments: Rapid expansion of UPI, mobile banking and internet banking increases the potential exposure to financial fraud.
• Interconnected Infrastructure: A vulnerability in one digital service can affect other connected platforms and institutions.
• Large User Base: NPCI data indicates that UPI processed approximately 186 billion transactions during 2024–25.
• Data Concentration: Banks, government agencies and digital platforms store large volumes of sensitive personal and financial information.
• Third-Party Dependencies: Dependence on external software providers, cloud services and digital-certification agencies creates additional security risks.

Measures to Improve Cyber Hygiene

Important Institutions and Initiatives

Challenges

• It Increases sophistication of phishing, ransomware and AI-enabled cyberattacks.
• The  Shortage of skilled cybersecurity professionals.
• The Low awareness of basic digital security practices.
• The Weak security practices among small businesses and MSMEs.
• The Growing dependence on interconnected digital platforms.
• The Difficulty in identifying attackers operating across international jurisdictions.

Conclusion

Cyber hygiene is no longer merely an individual responsibility or a compliance requirement; it is essential for India's economic and national security. As digital payments, banking and public services expand, India must strengthen preventive security, early threat detection, institutional accountability and rapid recovery mechanisms to maintain trust in its digital ecosystem.