[elyobo]

Undeniably bad, but I'm fighting off a slight sense of schadenfreude here, due to their prior claims[1].

[1] https://www.troyhunt.com/is-indias-aadhaar-system-really-hac...

[zik]

Yes it looks like their security was really amateur hour stuff too, with a lot of the authentication done on the client side. This makes their claims that it was "hack-proof" look particularly embarrassing.