IIT Kanpur Considers Second Chance for Student Accused of Hacking Institute Website After Admission Rejection

The Indian Institute of Technology Kanpur (IIT Kanpur) is considering giving a second opportunity to a student accused of hacking the official websites of IIT Kanpur and IIT Madras after he failed to secure admission to the institute's newly introduced Bachelor of Cyber Security programme.

The incident came to light earlier this week when the student claimed on social media that he had accessed sections of the two institutions' websites after being rejected during the admission process. According to his posts, the intrusion was intended to demonstrate his cybersecurity expertise rather than cause damage to the systems.

The student reportedly left a message on the IIT Kanpur website that read, "Site is hacked. All I need is just a fair chance," expressing frustration over not being selected for the programme.

Screenshots of the alleged breach were later shared on social media platforms including X and Reddit, where the student explained that he had completed all admission requirements, paid the application fee, uploaded the necessary documents and submitted evidence of his cybersecurity projects. However, he claimed he was not shortlisted for the hackathon stage of the selection process, which formed a key part of admissions.

IIT Kanpur Director Manindra Agrawal confirmed that the student had managed to gain access to certain sections of the official websites of both IIT Kanpur and IIT Madras. However, rather than immediately pursuing criminal proceedings, the institute has opted to assess the student's technical capabilities before deciding on further action.


According to Agrawal, the admission process for the current academic session has already concluded, making it impossible to admit the student this year. Nevertheless, the institute plans to invite him to campus for a formal evaluation of his cybersecurity knowledge and practical skills.

"If he demonstrates genuine technical competence through an appropriate assessment, we will consider giving him an opportunity during the next admission cycle," Agrawal said.

He also noted that senior faculty members and technical experts have been instructed to meet with the student to counsel him on the legal and ethical responsibilities associated with cybersecurity.


The institute intends to explain that gaining unauthorized access to computer systems, regardless of intent, is illegal and should never be repeated.

An IIT Kanpur official, speaking on condition of anonymity, revealed that the institute had initially considered filing a First Information Report (FIR) against the student following the alleged breach. However, officials decided to first verify the claims, examine the extent of the intrusion and evaluate the student's actual technical abilities before taking legal action.


The official said the institute has a history of encouraging talented young cybersecurity enthusiasts when their skills are demonstrated responsibly.


Earlier this year, IIT Kanpur reportedly offered a position at its Cyber Security Centre of Excellence (C3iHub) to another young cybersecurity researcher who identified vulnerabilities in the Central Board of Secondary Education's online answer-sheet evaluation portal and responsibly disclosed them.


The latest incident has sparked discussions within India's cybersecurity community about the balance between rewarding exceptional technical talent and ensuring strict compliance with cybersecurity laws and ethical standards.

Experts have pointed out that while ethical hacking and vulnerability research are valuable skills, unauthorized access to computer systems remains a violation of the law regardless of motivation. They argue that responsible disclosure through approved channels is essential for maintaining trust and protecting digital infrastructure.

At the same time, the institute's willingness to assess the student's abilities rather than immediately pursue prosecution has drawn attention as an example of recognizing potential while reinforcing the importance of ethical conduct.

The outcome of the planned technical evaluation could determine whether the student receives an opportunity to compete for admission during the next academic year, turning an alleged cyber intrusion into a lesson on both cybersecurity ethics and the responsible use of exceptional technical talent.