CBFC Data Breach Exposes 500 Film Scripts and Distribution Deals
A data breach at India's Central Board of Film Certification exposed records for over 500 film titles from December 2025 to August 2026. The leak, originating from the e-Cinepramaan portal, revealed sensitive shooting scripts, cut summaries, and unredacted distribution agreements. This exposure highlights vulnerabilities in India's film regulatory infrastructure, potentially impacting commercial negotiations and creative workflows for international and domestic filmmakers alike.
Key points
- The Central Board of Film Certification (CBFC), India's primary film regulatory body, suffered a data breach exposing records for over 500 film titles.
- Leaked documents from the e-Cinepramaan portal cover submissions between December 2025 and August 2026, including detailed shooting scripts with shot-by-shot translations and dialogue annotations.
- The breach revealed distribution agreements with unredacted fee structures, exposing commercial terms for both international films entering India and domestic dubbed versions.
- Cut summaries, which are technically public under Section 5A(2) of the Cinematograph Act, 1952, were found behind a maintenance message on the CBFC website.
- The exposure of pre-review scripts and financial terms may impact commercial negotiations and creative strategies for filmmakers relying on the CBFC's certification process.
A significant data breach at India’s Central Board of Film Certification (CBFC) has exposed sensitive production and commercial data for over 500 film titles. The leak, discovered by The Hindu, originated from the CBFC’s e-Cinepramaan portal, the digital platform used by filmmakers to submit applications for certification. The affected records span from December 2025 to August 2026, encompassing dozens of feature films and various other titles.
The exposed documents include detailed shooting scripts prepared specifically for the censor board’s review. These scripts contain shot-by-shot translations, annotations, and even labels identifying swear words and clarifying dialogue. Additionally, the breach revealed summaries of cuts ordered by the CBFC. While these cut summaries are technically public information under Section 5A(2) of the Cinematograph Act, 1952, the board had recently obscured them behind an “under maintenance” message on its website, making the leak more significant than a simple public record release.
Perhaps most critically, the breach exposed film distribution agreements, including deals between international filmmakers and Indian distributors, as well as domestic licensing arrangements for dubbed versions. At least three of these agreements contained unredacted or improperly redacted fee structures, revealing the financial terms of licensing. This exposure of commercial data, combined with pre-review creative materials, suggests a potential vulnerability in the regulatory workflow that could influence future negotiations and creative decisions in the Indian film industry.
Sources
The WireByte editorial team synthesises technology news from multiple primary sources, verifies the facts, and links every source. Articles are produced with AI assistance and reviewed under our editorial policy.
