Around 130 million Aadhaar numbers, sensitive data meant to remain private, have been out in the public domain for last few months. Deliberate revelation of Aadhaar can lay people open to financial fraud and it is a punishable offence. But here, the culprit was poor security protocols of websites belonging to the Centre's rural development ministry and the state government of Andhra Pradesh, reported the Centre of Internet & Society, a non-profit research organisation.