The Unique Identification Authority of India, UIDAI, said that more than 200 central and state government websites publicly displayed details such as names and addresses of some Aadhaar beneficiaries.
In response to an RTI query, the Aadhaar issuing body added that it took note of the breach and got the data removed from those websites.
It did not specify when the breach took place. It said Aadhaar details have never been made public by UIDAI.
The authority said security audits are conducted on a regular basis to further strengthen security and privacy of data. Besides this, all possible steps are taken to make the data safer and protected.