New Delhi, Oct. 8 -- A security researcher has said he warned the Election Commission of India (ECI) and the country's cyber-security agency, CERT-In, about flaws in the Commission's voter-services website and its ECINET app back in July. He said they could expose election officials' contact details and let attackers read or forge data in the app.

Three months passed with no fix acknowledged. Om Monday, a day after HT sent both agencies questions about his findings, CERT-In told him in an e-mail that one of the flaws had been fixed and that work on the rest was "under progress". It is not clear when the fix was effected.

The researcher, Nisarga Adhikary, emailed CERT-In on July 8, with a copy to the ECI's complaints address. CERT-In's r...