Justice Joymalya Bagchi, presiding over a bench with Justice V Mohana, delivered a blunt reality check to the insurance sector. The Court noted that the leakage of personal data is no longer a hypothetical risk but a widespread reality. This observation came during the hearing of a petition filed by cybersecurity researcher Himanshu Pathak, who alleged significant vulnerabilities in the systems of Star Health and Allied Insurance Company.
Senior Advocate S Muralidhar, representing the insurer, attempted to reassure the bench. He argued that the company had implemented "extraordinary security measures" and maintained continuous monitoring. "Your Lordships will be quite astonished how many layers of security we have built," Muralidhar told the Court, adding that the dark web is "beyond the control of anyone." He contended that the mere existence of illegal data markets does not make companies complicit in breaches.
The Court, however, did not accept this passive defense. Justice Bagchi pushed back, stating that acknowledging the threat is not enough; the industry must adapt. The bench highlighted that traditional, static security protocols are increasingly obsolete against sophisticated cybercriminals who constantly evolve their methods. The ruling implicitly places the burden of proactive security on every entity handling sensitive personal information.
The implications extend far beyond Star Health. As digital adoption in India accelerates, the exposure of identity details, financial records, and contact information to misuse grows. The Court’s remarks signal a shift in judicial expectation: organizations can no longer rely on initial compliance. They must demonstrate ongoing vigilance and the ability to update their defenses in real-time.
The case will continue, with the Court likely to issue specific directions on what constitutes "continuous monitoring" for major data handlers. For now, the message to the private sector is clear: security is a process, not a product, and the dark web is not an excuse for negligence.