19-Year-Old Hired by IIT Kanpur After Exposing CBSE Exam Flaws
Teen Hired by IIT Kanpur After CBSE Exam Flaw Exposé

NEW DELHI: Most teenagers fresh out of Class XII are still picking a college. Nisarga Adhikary, all of 19, has instead landed a job at one of India's top engineering colleges.

Adhikary, who cleared his board exams only this year, has been hired by IIT Kanpur as an Open-Source Intelligence (OSINT) and threat intelligence engineer at C3iHub, its cybersecurity innovation hub. The job materialised after the storm he kicked up over CBSE's digital exam system.

Earlier this year, as the board rolled out on-screen marking (OSM) system— under which examiners grade scanned answer sheets online — Adhikary began probing the publicly accessible parts of the set-up. He says he found serious loopholes: a master password sitting in plain sight in the portal's code, an OTP check that ran on the user's own browser and a flaw that let one user retrieve another's records. Adhikary also flagged a cloud bucket that, by his account, left scanned answer sheets and question papers open to anyone online.

Wide Pickt banner — collaborative shopping lists app for Telegram, phone mockup with grocery list

He reported it all to CERT-In in Feb before going public, and the disclosures snowballed into a national debate over student privacy and exam security.

His blog post caught the eye of IIT Kanpur director Manindra Agrawal, who got in touch with him. “We are always scouting for talent that can help us build a stronger cybersecurity wall,” Agrawal told TOI, adding the institute had quietly inducted a few young engineers into the same team years ago. He could not confirm whether Adhikary was the youngest hire, though he was definitely among them. The director left no room for confusion about Adhikary's profile. “No. He is on a full-time job, not here to study.” On the salary, which neither side put a number to, Agrawal said it was fixed in accordance with the institute's analysis.

Adhikary, according to reports, was less guarded. Used to dollar-paying projects for US firms, he said while the salary was decent, it was a shade short of his expectations. When asked if the teen who exposed CBSE would be deployed on the board's systems given that IIT Kanpur works for the board, Agrawal said, “That will hinge on the future course of action and requirements.”

Get the latest India news and live updates. Download the TOI App.

About the Author: Manash Pratim Gohain is a seasoned journalist with over two decades at The Times of India, where he has built a rich body of work spanning education policy, politics, and governance. Renowned for his incisive coverage of the National Education Policy (NEP) 2020, accreditation reforms, and skilling initiatives, he has also reported on student politics, urban policy, and social movements. His political reportage—both reflective and news-driven—adds depth to his writing, bridging policy with public impact. Through his 2,500 articles and related outlets, he has emerged as a trusted voice in national discourse, particularly in linking education reform to broader societal change.

Pickt after-article banner — collaborative shopping lists app with family illustration