Paris:

Telegram founder and chief executive Pavel Durov said Monday that the messaging platform had removed more “problematic content”, weeks after his arrest in France on charges of failing to act against criminals using the app.

Telegram’s search feature “has been abused by people who violated our terms of service to sell illegal goods”, Durov told the 13 million subscribers of his personal messaging channel.

“Over the past few weeks” staff had combed through Telegram using artificial intelligence to ensure “all the problematic content we identified in Search is no longer accessible”, he said.

Durov added that the platform had updated its terms of service and privacy policy to make clear that it would share infringers’ details with authorities — including internet IP addresses and phone numbers — “in response to valid legal requests”.

“We won’t let bad actors jeopardise the integrity of our platform for almost a billion users,” he said.

Durov was arrested on August 24 as he arrived at Le Bourget airport outside Paris on a private jet.

After days of questioning, he was charged with several counts of failing to curb extremist and terrorist content and released on a five-million-euro ($5.6 million) bail.

During the investigation he must remain in France and report to police twice a week.

Durov — who holds Russian, French and United Arab Emirates passports — initially criticised his arrest, but he has since announced steps appearing to bow to Paris’s demands.

On September 6, he said Telegram would alter its “people nearby” feature to present users with “legitimate businesses” rather than “bots and scammers”.

“This year we are committed to turn moderation on Telegram from an area of criticism into one of praise,” he said at the time.

Durov, an enigmatic figure who rarely speaks in public, has a fortune estimated at $15.5 billion by Forbes magazine, but touts the virtues of an ascetic life that includes ice baths and not drinking alcohol or coffee.

(Except for the headline, this story has not been edited by NDTV staff and is published from a syndicated feed.)

Bengaluru:

Stolen customer data including medical reports from India’s biggest health insurer, Star Health, is publicly accessible via chatbots on Telegram, just weeks after Telegram’s founder was accused of allowing the messenger app to facilitate crime. The purported creator of the chatbots told a security researcher, who alerted Reuters to the issue, that the private details of millions of people were for sale and that samples could be viewed by asking the chatbots to divulge.

Star Health and Allied Insurance, whose market capitalization exceeds $4 billion, in a statement to Reuters said it has reported alleged unauthorized data access to local authorities. It said an initial assessment showed “no widespread compromise” and that “sensitive customer data remains secure”.

Using the chatbots, Reuters was able to download policy and claims documents featuring names, phone numbers, addresses, tax details, copies of ID cards, test results and medical diagnoses.

The ability for users to create chatbots is widely credited with helping Dubai-based Telegram become one of the world’s biggest messenger apps with 900 million active monthly users.

However, the arrest of Russian-born founder Pavel Durov in France last month has increased scrutiny of Telegram’s content moderation and features open to abuse for criminal ends. Durov and Telegram denied wrongdoing and are addressing the criticism.

The use of Telegram chatbots to sell stolen data demonstrates the difficulty the app has in preventing nefarious agents taking advantage of its technology and highlights the challenges Indian companies face in keeping their data safe.

The Star Health chatbots feature a welcome message stating they are “by xenZen” and have been operational since at least Aug. 6, said UK-based security researcher Jason Parker.

Parker said he posed as a potential buyer on a online hacker forum where a user under the alias xenZen said they made the chatbots and possessed 7.24 terabytes of data related to over 31 million Star Health customers. The data is free via the chatbot on a random, piecemeal basis, but for sale in bulk form.

Reuters could neither independently verify xenZen’s claims nor ascertain how the chatbot creator obtained the data. In an email to Reuters, xenZen said they were in discussions with buyers without disclosing who or why they were interested.

TAKEN DOWN

In testing the bots, Reuters downloaded more than 1,500 files with some documents dated as recently as July 2024.

“If this bot gets taken down watch out and another one will be made available in few hours,” the welcome message read.

The chatbots were later marked “SCAM” with a stock warning that users had reported them as suspect. Reuters shared details of the chatbots with Telegram on Sept. 16 and within 24 hours spokesperson Remi Vaughn said they had been “taken down” and asked to be informed should more appear.

“The sharing of private information on Telegram is expressly forbidden and is removed whenever it is found. Moderators use a combination of proactive monitoring, AI tools and user reports to remove millions of pieces of harmful content each day.”

New chatbots have since appeared offering Star Health data.

Star Health said an unidentified person contacted it on Aug. 13 claiming to have access to some of its data. The insurer reported the matter to the cybercrime department of its home state of Tamil Nadu and federal cyber security agency CERT-In.

“The unauthorized acquisition and dissemination of customer data is illegal, and we are actively working with law enforcement to address this criminal activity. Star Health assures its customers and partners that their privacy is of paramount importance to us,” it said in its statement.

In an Aug. 14 stock exchange filing, Star Health, India’s biggest player among standalone health insurance providers, said it was investigating an alleged breach of “a few claims data”.

Representatives for CERT-In and the Tamil Nadu cybercrime department did not respond to emailed requests for comment.

UNAWARE

Telegram allows individuals or organizations to store and share large amounts of data behind anonymous accounts. It also lets them create customizable chatbots which automatically provide content and features based on user requests.

Two chatbots distribute Star Health data. One offers claim documents in PDF format. The other allows users to request up to 20 samples from 31.2 million datasets with a single click giving details including policy number, name and even body mass index.

Among documents disclosed to Reuters were records related to the treatment of the one-year-old daughter of policyholder Sandeep TS at a hospital in the southern state of Kerala. The records included diagnosis, blood test results, medical history and a bill of nearly 15,000 rupees ($179).

“It sounds concerning. Do you know how this can affect me?” said Sandeep, confirming the documents’ authenticity. He said Star Health had not notified him of any data leak.

The chatbot also leaked a claim last year by policyholder Pankaj Subhash Malhotra which included ultrasound imaging test results, details of illness and copies of federal tax account and national ID cards. He also confirmed the documents were genuine and said he was not made aware of any security breach.

The Star Health chatbots are part of a broader trend of hackers using such methods to sell stolen data. Of five million people whose data was sold via chatbots, India represented the largest number of victims at 12%, showed the latest survey on the epidemic conducted by NordVPN at the end of 2022.

“The fact that sensitive data is available via Telegram is natural, because Telegram is an easy-to-use storefront,” said NordVPN cybersecurity expert Adrianus Warmenhoven. “Telegram has become an easier to use method for criminals to interact.”

(Except for the headline, this story has not been edited by NDTV staff and is published from a syndicated feed.)

Paris:

The chief of Telegram Pavel Durov on Wednesday was charged by the French judiciary with a litany of violations related to the messaging app but allowed to go free while being banned from leaving the country.

Durov was granted conditional release against a bail of five million euros and on the condition he must report to a police station twice a week as well as remaining in France, Paris prosecutor Laure Beccuau said in a statement following an hours-long hearing with two investigating magistrates.

(Except for the headline, this story has not been edited by NDTV staff and is published from a syndicated feed.)

Pavel Durov, the billionaire founder and CEO of the Telegram messaging app, was arrested at the Bourget airport outside Paris on Saturday evening, French local media said, citing unnamed sources.
They said the investigation was focused on a lack of moderators on Telegram, and that police considered that this situation allowed criminal activity to go on undeterred on the messaging app.

Telegram did not immediately respond to a Reuters request for comment. The French Interior Ministry and police had no comment. Russia’s Foreign Ministry said it was taking steps to “clarify” the situation and questioned whether Western non-governmental organizations (NGOs) would seek his release..

What is known about Durov and Telegram:

* Russian-born Durov, 39, is the founder and owner of messaging app Telegram, a free-to-use platform that competes with other social media platforms such as Facebook’s WhatsApp, Instagram, TikTok and WeChat. The platform aims to surpass one billion active monthly users within a year.

* Telegram is influential in Russia, Ukraine and the republics of the former Soviet Union. It has become a critical source of information on Russia’s war in Ukraine, used heavily by both Moscow and Kyiv officials. Some analysts call the app “a virtual battlefield” for the war.

* Durov, whose fortune was estimated by Forbes at $15.5 billion, left Russia in 2014 after refusing to comply with government demands to shut down opposition communities on his VKontakte social media platform, which he sold.

* Russian and French media say Durov became a French citizen in 2021. He moved himself and Telegram to Dubai in 2017.

* “I would rather be free than to take orders from anyone,” Durov told US journalist Tucker Carlson in April about his exit from Russia and search for a home for his company which included stints in Berlin, London, Singapore and San Francisco.

* In the same interview, Durov said that, beyond money or Bitcoin, he had no major property such as real estate, jets or yachts, as he wanted to be free.

(Except for the headline, this story has not been edited by NDTV staff and is published from a syndicated feed.)

New Delhi:

The government has issued notices to social media platforms X, formerly Twitter, YouTube, and Telegram to remove child sexual abuse material from their platforms in India, an official statement said on Friday. Minister of State for Electronics and IT, Rajiv Chandrasekhar said if social media intermediaries do not act swiftly, their safe harbour under section 79 of the IT Act would be withdrawn, implying that the platforms can be directly prosecuted under the applicable laws and rules even though the content may have not been uploaded by them.

“Ministry of Electronics and IT has issued notices to social media intermediaries X, YouTube, and Telegram, warning them to remove Child Sexual Abuse Material (CSAM) from their platforms on the Indian internet.

“The notices served to these platforms emphasize the importance of prompt and permanent removal or disabling of access to any CSAM on their platforms,” the statement said.

The notices also call for the implementation of proactive measures, such as content moderation algorithms and reporting mechanisms, to prevent the dissemination of CSAM in the future.

“We have sent notices to X, YouTube, and Telegram to ensure there is no Child Sexual Abuse Material that exists on their platforms. The government is determined to build a safe and trusted internet under the IT rules.

“If they do not act swiftly, their safe harbour under section 79 of the IT Act would be withdrawn and consequences under the Indian law will follow,” Mr Chandrasekhar said.

The Information Technology (IT) Act, 2000, provides the legal framework for addressing pornographic content, including CSAM. Sections 66E, 67, 67A, and 67B of the IT Act impose stringent penalties and fines for the online transmission of obscene or pornographic content, the statement said. 

(Except for the headline, this story has not been edited by NDTV staff and is published from a syndicated feed.)