The Indian Institute of Technology Roorkee (IIT Roorkee), the organising institute for JEE Advanced 2026, issued an official clarification on June 6, 2026 firmly denying claims of a significant privacy violation affecting JEE Advanced 2026 students. The institute confirmed that an ethical hacker had flagged a temporary misconfiguration in a cloud storage component on June 2, which was immediately fixed. The vulnerability exposed data of less than 0.05 percent of registered candidates briefly, and exam outcomes remain completely unaffected.
What Actually Happened
| Detail | Information |
|---|---|
| Date of Misconfiguration Reported | June 2, 2026 |
| Reported By | Ethical hacker |
| Type of Issue | Temporary cloud storage misconfiguration |
| Duration | Brief period before immediate fix |
| Data Exposure | Less than 0.05% of registered candidates |
| Exam Outcomes Affected | None |
| Candidates with Ranks Affected | None |
IIT Roorkee’s Official Statement
The institute stated:

- The misconfiguration was in a non-core cloud storage component and was unrelated to the examination system, scoring, or rank calculation
- No exam results, ranks, question papers, answer keys, or personal bank details were accessible during the brief window
- The issue was flagged responsibly by an ethical hacker and resolved immediately on June 2
- IIT Roorkee thanked the ethical hacker for responsible disclosure
- A thorough internal audit found no evidence of any data being downloaded, misused, or transferred during the window
What This Means for JEE Advanced 2026 Candidates
- All 56,880 qualified candidates and their ranks are unaffected
- JoSAA counselling at josaa.nic.in continues normally from June 2 with the June 11 choice filling deadline unchanged
- Candidates should proceed with confidence and complete their JoSAA choice filling before June 11 at 5:00 PM










