A security incident at the Central Board of Film Certification has made some of Hindi cinema’s most guarded paperwork unexpectedly public. According to a News18 report citing The Hindu, records tied to more than 500 film titles were accessible through the board’s e-Cinepramaan portal and could be reached through the Internet Archive for several days.
What was exposed
The files were not finished films. They were the administrative and creative layer around them: shooting scripts submitted for certification, cut lists showing what the board asked filmmakers to change, and distribution agreements laying out commercial terms. Some of the material related to unreleased titles, which raises the immediate worry that plot details and deal structures may have been visible before a film reached theatres.
- Shooting scripts and cut orders for Hindi titles
- Distribution contracts covering rights, fees and promotional conditions
- Paperwork tied to foreign titles, including Academy Award nominee The Secret Agent and Good Luck, Have Fun, Don’t Die
Why agreements are more sensitive than scripts
Script leaks hurt because they spoil a story. Contract leaks can be costlier. The Hindu’s report identified at least three agreements that revealed licence fees, and the broader documents outline the mechanics of distribution: who owns rights, what promotional work is required, and what conditions bind producers and distributors. That kind of detail is negotiation leverage. Once it is public, future deals can be priced against leaked precedents.
The board’s response
The CBFC said it is investigating the unauthorised access and has started a security audit of e-Cinepramaan, which has been used for about ten years to file certification paperwork. The board stated it found no evidence of further access beyond the documents already claimed to be exposed, and said individual filmmakers’ accounts did not appear compromised. It also noted the user stopped uploading after the portal became unavailable for several hours on October 4.
The Internet Archive told The Hindu it removed the account linked to the incident and filed a complaint with cybercrime authorities. CERT-In has been informed.
What this means for filmmakers and audiences
For producers, the incident is a reminder that regulatory filing systems are part of the content-security perimeter. A script sent for certification is not simply a compliance document; it is a pre-release asset. For audiences, leaked paperwork is not an authorised way to encounter a film, and it may distort how a finished work is received.
Source: News18
Comments