apparently on the darkweb, etc [1], among other leaks [2,3]. To be fair, the issue doesn't appear to be with the aadhaar database itself but the many agencies that use / store the data but do not protect it properly. Poor to non-existent data handling practices, limited understanding of privacy risks at the end user level..

Aadhaar has been transformational; but I hope we don't go down the path of the US SSN: one of the simplest vectors for massive identity theft in the US. I don't think we will, but it does appear that there are significant teething issues that could be better addressed if the powers that be were more willing to acknowledge shortcomings instead of saying the data is protected by 13 feet walls. [4]

[1] https://www.moneylife.in/article/aadhaar-data-breach-largest...

[2] https://www.thehindu.com/sci-tech/technology/major-aadhaar-d...

[3] https://techcrunch.com/2019/01/31/aadhaar-data-leak/

[4] https://www.news18.com/news/india/aadhaar-data-protected-by-...