Archive · 4 Nov 2025
Gujarat Hospital CCTV Hackers Sold Intimate Footage on Porn Market
Imagine a hospital had cameras to keep an eye on things, like in a doctor's room.
But, they forgot to change the secret code to keep the cameras safe, using a very simple one that anyone could guess.
Bad people found this easy code and used special computer programs to sneak into the cameras.
They watched and recorded videos of women during private times.
Then, these bad people took those videos and sold them to others online, like in a secret club.
This happened for a long time, and the videos were sold to people in many different countries.
Eventually, police found out and caught some of the people involved.
The cameras that were hacked were not just at this one hospital, but in many places across the country, like schools and other businesses.
Hackers exploited weak security at a Gujarat hospital to steal intimate footage from a gynaecology ward.
The stolen footage was sold for profit on international porn markets, with clips costing between ₹700 and ₹4,000.
Around 80 CCTV dashboards were compromised nationwide, affecting various locations including hospitals, schools, and residences.
Investigations revealed the use of default passwords and brute force attacks as primary methods for gaining access.
Arrests were made in February, but illegally obtained clips remained available online until at least June.
- Who
- Hackers, including lead hacker Parit Dhameliya and accomplice Rohit Sisodiya, and victims from various locations across India.
- What
- Hackers gained unauthorized access to CCTV systems, stole intimate footage of women from a gynaecology ward and other locations, and sold it on the international porn market.
- When
- The access logs spanned from January 2024 to early December 2024. The breach continued for over a year, with arrests made in February of the current year.
- Where
- The incident originated at Payal Maternity Hospital in Rajkot, Gujarat, but investigations revealed around 80 CCTV dashboards compromised nationwide, including in Delhi, Pune, Mumbai, Nashik, Surat, and Ahmedabad.
- Why
- Hackers exploited weak security measures to steal footage for profit, selling it on international porn markets.
Security Lapses Enabled Hackers
Swift Action Taken After Breach
Initial Access and Vulnerabilities
Security Lapses Enabled Hackers
Hackers exploited weak security measures, including default passwords like 'admin123', and used brute force attacks to gain access to CCTV systems.
Swift Action Taken After Breach
The hospital's digital housekeeping lapse provided the initial entry point for hackers.
Duration and Discovery of Breach
Security Lapses Enabled Hackers
The breach went on for over a year, with hacked clips still available until at least June, despite arrests in February.
Swift Action Taken After Breach
The scam came to light after promotional clips were posted online, leading to an investigation and arrests.
Methods Used by Perpetrators
Security Lapses Enabled Hackers
The lead hacker used multiple software programs to steal credentials, and another accused used a remote viewing tool to access cameras.
Swift Action Taken After Breach
The perpetrators were arrested in February of this year, indicating law enforcement action.
- Hospital Name
- Payal Maternity Hospital
- Location
- Rajkot, Gujarat, India
- Breach Period
- January 2024 - Early December 2024 (access logs), footage stolen over nine months
- Number of Clips Stolen
- At least 50,000
- Number of CCTV Dashboards Compromised
- Around 80 nationwide
- Footage Price Range
- ₹700 to ₹4,000
- Main Accused
- Parit Dhameliya