The ransomware attack targeting SpiceJet last week focused attention on one of India’s biggest cyber-vulnerabilities. Both government services as well as private sector businesses have moved en masse into the digital space and their efforts have been embraced enthusiastically by India’s 780 million broadband users. This means millions of Indian websites gather sensitive data with the Unified Payments Interface (UPI) processing close to 5 billion transactions per month. Many of those apps and websites, and the databases at their back-end, are insecure. All are juicy targets because they contain troves of sensitive personal data. Many are more vulnerable because they