THE leak of personal and sensitive data of the people registered on the COWIN vaccination portal makes clear that its database has been breached. Personal and sensitive data of individuals, including name, gender, date of birth, address, Aadhaar number, mobile number and the location of their vaccination centre, all of which can be accessed through a Telegram bot got leaked. The data of well-known names have been made public, including where and when they were vaccinated.