IndiaToday not doing this guy a favor using the word "hacker". Top bullet point: "Hackers accessed sensitive data...". Even the graphic at the top says "SYSTEM HACKED".
Yes, agree. at the same time, the company bears significant responsibility under the law. Their unconventional and insecure API implementation likely violates multiple provisions of the Act. They could face substantial penalties and legal consequences for failing to adequately protect personal data and implement appropriate security measures.