NEW DELHI, May 28 -- A Reserve Bank of India (RBI) platform meant to help users recover unclaimed bank deposits exposed sensitive personal information online, allowing anyone with a mobile number and one-time password to access details of thousands of dormant accounts, according to an independent researcher whose findings were later corroborated by Mint.

The platform, Unclaimed Deposits Gateway to Access Information (Udgam), which has 30 participating banks, allowed users until 25 May to register and search records of unclaimed deposits in dormant bank accounts. Search fields included users' names, residential addresses, bank names, and unclaimed deposits reference numbers (UDRNs), which can be used to initiate claims with banks.

Indepe...