The certification paper trail that Hindi filmmakers file before a release has become the centre of a security scare. The Central Board of Film Certification says it is investigating an alleged breach of its e-Cinepramaan portal after documents linked to more than 500 film titles surfaced online.
According to the report that News18 cited from The Hindu, the exposed material was not the films themselves but the paperwork that accompanies an application: shooting scripts, cut orders and distribution agreements. The files were said to have been downloadable for several days through the Internet Archive, a non-profit digital library, before being taken down.
What the leak contained
Launched around a decade ago, e-Cinepramaan is the online route through which filmmakers submit documents when they apply for certification. For an industry that treats an unreleased script as a closely guarded asset, the exposure cuts at a core fear: story details can reach audiences before a film is positioned, and certification records can show what the board asked to be changed.
Why it matters
The reported exposure extended beyond creative documents. At least three distribution agreements revealed the fees paid to license films, according to the report. The documents are said to have included agreements for the Brazilian Oscar nominee The Secret Agent and the Hollywood title Good Luck, Have Fun, Don’t Die.
Distribution contracts carry sensitive commercial terms. A single contract can reveal:
- How revenue is shared between producer and distributor.
- Who controls rights and in which territories.
- What promotional obligations each side must meet.
If those terms become public, future negotiations can be weakened before they begin.
The response so far
The CBFC said it is running a security audit of the portal. After reviewing the information, the board said it had found no evidence of further access to the documents claimed to have been exposed. It also said the user involved stopped uploading files after the portal became unavailable for several hours on October 4, and that it had no indication that individual filmmakers’ accounts were compromised.
The Internet Archive told The Hindu the account linked to the incident had been taken down and that it had filed a complaint with cybercrime authorities. India’s cybersecurity agency, CERT-In, was informed.
The scale of the exposure, more than 500 titles, makes this a sector-wide problem rather than a single production’s mishap. The practical lesson for producers and writers is straightforward: treat every document uploaded to a certification portal as potentially public. A script draft, a list of cuts or a licensing fee is enough to move a negotiation or spoil a reveal if it reaches the wrong desk.
Source: News18
Comments