Rejected applicant hacks IIT website, may be considered for future admission

A young Indian applicant who was not selected for admission to the Indian Institute of Technology (IIT) Kanpur allegedly gained unauthorized access to the institute's website after his application was rejected.

He also claimed to have accessed parts of the IIT Madras website.

Instead of immediately pursuing legal action, IIT Kanpur says it will assess his technical skills and may consider him for future admission.

According to Indian media reports, the student had applied for IIT Kanpur's newly introduced undergraduate programme in Cybersecurity.

After failing to make the initial shortlist, he posted on social media claiming that he had accessed the websites of both IIT Kanpur and IIT Madras.

On the IIT Kanpur website, he reportedly left a message stating:
"The website has been compromised. I just need a fair chance."

In posts on X and Reddit, the student said he had completed every step of the application process, including paying the application fee, submitting all required documents, and providing samples of his cybersecurity work.

However, he was not shortlisted and therefore could not participate in the hackathon, which was part of the admission process.

He insisted that his objective was not to cause damage, but rather to demonstrate his technical abilities.
IIT Kanpur Director Professor Manindra Agrawal said the applicant was initially rejected because he lacked formal experience in cybersecurity. However, the institute now intends to invite him to campus for an official assessment of his skills.

Since admissions for the current academic year have already concluded, immediate enrollment is not possible.

However, if he successfully demonstrates his abilities during the evaluation, the institute will consider him for admission in a future intake, Agrawal said.

The director also confirmed that the student had managed to access certain sections of the official websites of both IIT Kanpur and IIT Madras.

Senior faculty members and engineers have been asked to speak with him and explain that accessing computer systems without authorization is illegal and should not be repeated.

An IIT Kanpur official, speaking on condition of anonymity, said the institute initially considered filing a criminal case. However, it later decided to first verify the student's claims and evaluate his technical capabilities before determining any further action.

The incident has sparked fresh debate in India over cybersecurity, ethical hacking, and how institutions should identify and nurture talented young programmers while enforcing cybersecurity laws.