---
title: 'TG-iPASS ransomware attack encrypts Telangana business portal database, portal offline since October 22'
url: 'https://securteksecurity.com/news/tg-ipass-ransomware-attack-telangana-portal-offline'
markdown: 'https://securteksecurity.com/news/tg-ipass-ransomware-attack-telangana-portal-offline.md'
date: '2026-10-24'
description: "TG-iPASS, Telangana's flagship single-window business clearance portal for government-to-business services for industrial and manufacturing projects, has been offline since about 11:36 PM IST on October 22, 2026 after a ransomware attack encrypted its database and related files. According to a comp…"
taxonomy:
  category:
    - Cybersecurity
---

# [TG-iPASS ransomware attack encrypts Telangana business portal database, portal offline since October 22](https://securteksecurity.com/news/tg-ipass-ransomware-attack-telangana-portal-offline)

   24th Oct 2026  

TG-iPASS, Telangana's flagship single-window business clearance portal for government-to-business services for industrial and manufacturing projects, has been offline since about 11:36 PM IST on October 22, 2026 after a ransomware attack encrypted its database and related files. According to a complaint filed by Sanga Suresh, joint director of industries, the technical team could not connect to the Cloud4C-hosted database server, a restart did not restore it, and inspection found the SQL Server Agent service stopped and the server compromised, with affected files renamed with a .vgb extension and a note containing a contact email address and a machine identifier left on the server. The Telangana Cyber Security Bureau registered a case under Sections 43 and 66 of the Information Technology Act and opened an investigation. Prepared as a Cybersecurity item, not a Breaches add: no data exfiltration scale has been confirmed.

A bureau official said no monetary demand had been found so far, that the data appears to have been encrypted rather than deleted, and that the portal and database remained inaccessible. Investigators said the security measures in place were not satisfactory. The industries department sought deployment of an incident response team and forensic preservation of the compromised server, and an industries department official said backups exist and the website was expected to be restored by Monday morning.

Sources: [Hyderabad Mail](https://hyderabadmail.com/tg-ipass-ransomware-attack-database-encrypted/); [Europe Says, reporting Times of India Hyderabad](https://www.europesays.com/3329904/)

---

## Navigation

- Parent: [News](https://securteksecurity.com/news.md)
- Previous: [TFG London cyberattack takes IT systems offline at Phase Eight, Hobbs and Whistles](https://securteksecurity.com/news/tfg-london-cyberattack-phase-eight-hobbs-whistles-offline.md)
- Next: [Three South Korean financial firms report data breaches: Daishin, Bithumb and Mirae Asset Global Investments](https://securteksecurity.com/news/three-south-korean-financial-firms-report-data-breaches.md)