Film censor board documents on more than 500 films were posted online: what is known

The short version

• Reported by The Hindu: files linked to more than 500 film titles, including shooting scripts, censor cut orders, certification records and distribution agreements, were publicly available as downloads on the Internet Archive. They were reportedly removed earlier in October.
• Not leaked: the films themselves.
• Said by the board: it has found “no trace” of the certification documents that were claimed to have been accessed. It is investigating, has told CERT-In and the cybercrime authorities, and is running a security audit of its e-Cinepramaan filing portal. It says no filmmaker’s account appears to have been compromised.
• Why it matters: at least three of the distribution agreements reportedly showed licensing fees. Lawyers quoted by The Hindu say such terms could weaken a producer’s negotiating position.
• Not known: how the files reached the Internet Archive, who put them there, and whether they came from the board’s systems at all.

Reported versus said by the board

The board and the newspaper disagree about what the board has been able to confirm. Neither side has published evidence.

“No trace” means the board’s checks so far have not found the claimed access. It does not say the files were not taken, or that they did not come from the portal. The board has not said how thorough its checks were.

What was reportedly exposed

Scripts and cut orders are the kind of material a producer would want kept private before release, and licensing fees are commercial secrets. That is our reading of why it matters. Lawyers quoted by The Hindu make the negotiating point about the fees.

What the board and the Archive say

• The board: checked for unauthorised access and says it found no evidence. It has told CERT-In and cybercrime authorities and promises a “thorough security audit” of e-Cinepramaan.
• The Internet Archive: reportedly told The Hindu the user’s account was taken down and the files removed, and that a complaint has been filed with cybercrime authorities. This is second-hand.
• The Ministry of Information and Broadcasting: we found no statement from it.

What to do

1. If you have filed with the CBFC, change your e-Cinepramaan password, turn on any extra sign-in step it offers, and check your account’s recent activity.
2. Ask the board in writing whether your film’s files, contracts or cut orders were among those found, and what it can tell you.
3. Producers and distributors: assume the fees in a contract could be known to the other side, and do not rely on them staying secret in your next negotiation.
4. Anyone who runs a document portal: check that uploaded files are not reachable without a login, and that nothing from it appears on public archives or search engines.

What we don’t know yet

• How the files got onto the Internet Archive, and who put them there.
• Whether they came from e-Cinepramaan, from a filmmaker or distributor, or from somewhere else.
• What the board’s checks covered, and whether the audit will be published.
• How long the files were available, and how many times they were downloaded.
• Whether any filmmaker’s personal information was among them.

This story sticks to reporting that quotes the board. It does not name any person behind the files.