A major data breach has exposed certification records of more than 500 films handled by the Central Board of Film Certification (CBFC). The leaked documents include shooting scripts, cut orders and distribution agreements submitted during certification, and they remained accessible online for days. The CBFC says it is investigating the breach and conducting a security audit of its portal.

What was exposed

The CBFC runs an online portal called e-Cinepramaan for certification, through which filmmakers submit documents when applying for a certificate. The leaked files were accessed through this portal, and many remained available even though some had been uploaded earlier and later taken down.

The files did not include the films themselves. But scripts, cut orders and other certification documents can still reveal information filmmakers may not want public before a film's release. The exposed material reportedly included documents linked to the Brazilian Academy Award nominee The Secret Agent and the Hollywood film Good Luck, Have Fun, Don't Die.

Commercially sensitive details at risk

At least three agreements reportedly revealed the fees paid for licensing films. Such contracts can contain commercially sensitive information, including revenue-sharing arrangements, intellectual property rights, promotional obligations and conditions linked to a film's storyline or production.

While a script or certification record may not reveal everything about a film, the exposure of pre-release documents is a serious concern for producers, distributors and studios, especially when agreements and financial terms are involved.

Investigation and action so far

The CBFC said it reviewed information about the alleged unauthorised access but found no evidence of further access to the documents claimed to have been exposed. It is investigating the breach and auditing the portal's security.

The Internet Archive, the non-profit digital library through which the records were available for download, confirmed that the account in question had been taken down, and a complaint was filed with cybercrime authorities.

Why this leak matters

Certification documents are meant to be part of a regulated, confidential process between filmmakers and the board. When scripts, cut orders and contracts leak before release, they can hurt marketing plans, reveal story details and expose business terms that were never meant for public view. The incident is likely to push the board toward tighter controls on how certification files are stored and shared.