Bhubaneswar Commissionerate Police has launched an investigation after unidentified cyberattackers allegedly gained access to its official X account and used the verified law enforcement handle to publish cryptocurrency-related promotional posts. The account was compromised for nearly 24 hours before cyber experts restored access on Tuesday, according to police officials.
The police department is examining how the attackers obtained access and whether they exploited vulnerabilities in the account’s security arrangements. A senior police officer said investigators were working to identify those responsible and analyse the digital footprints left behind after the account was accessed and misused.
The incident occurred during the Durga Puja festivities, when residents were relying on the police department’s social media account for traffic advisories and other public updates. The unauthorised cryptocurrency-related posts remained visible for several hours, raising concerns about the reliability of official digital channels used for time-sensitive information.
Commissionerate Police cyber experts are examining login records, IP traces and account activity as part of the investigation. Preliminary findings suggest that the attackers may have used a virtual private network and other anonymising tools to conceal their identities and locations, according to police sources. The use of such tools could make it more difficult for investigators to establish the origin of the breach.
The police have not disclosed the specific method used to compromise the account, and the investigation is continuing. Officials are reviewing the account’s access controls and authentication mechanisms to determine whether weaknesses in those systems enabled the unauthorised access.
Following the breach, senior officers directed the cyber wing to strengthen the security architecture of the Commissionerate Police’s official digital platforms and social media accounts. The review is intended to prevent a repeat of the incident and protect the channels used by the department to communicate with residents.
The episode places a public-facing police account within the wider security requirements of digital municipal and law-enforcement communication. While the account has been restored, the department’s technical analysis will need to establish the access route, identify the perpetrators and determine whether any additional digital systems or information were affected. Police officials said the investigation and cybersecurity review were underway.
