Indian Student Allegedly Hacks IIT Websites After Being Denied Cybersecurity Admission

An Indian student has allegedly hacked the websites of two of the country’s prestigious technology institutions after failing to secure admission to a cybersecurity degree programme, leaving behind a message demanding what he described as a “fair chance.”

The student reportedly gained access to parts of the official websites of the Indian Institute of Technology Kanpur (IIT-K) and the Indian Institute of Technology Madras (IIT Madras), two of India’s leading institutions for technology and engineering.

On the IIT-K website, the student allegedly left a message reading, “Site is hacked, All I need is just a fair chance.” The message suggested that his intention was not to cause damage but to demonstrate his technical abilities after being denied an opportunity to study cybersecurity.

The incident has attracted attention because of the unusual response from IIT-K, which has reportedly chosen to consider the student’s technical abilities rather than immediately pursuing legal action against him.

IIT-K Director Manindra Agrawal said the student was not admitted because he did not have prior experience in cybersecurity, a requirement that apparently contributed to his rejection.

However, the institution has now decided to allow him to prove himself.

According to Agrawal, the student will be invited to the institute to take a special test designed to assess his technical abilities. If he demonstrates sufficient expertise, he could be considered during the next admission cycle.

The decision has created an unusual situation in which an alleged cyberattack may have given the student the very opportunity he was seeking.

Agrawal confirmed that the student had gained access to certain sections of the official websites of IIT-K and IIT Madras. The incident is now being treated as both a security concern and an opportunity to assess the student’s abilities.

Despite the institution’s decision to give him another chance, Agrawal has reportedly made it clear that the student’s actions were not acceptable.

The institute plans to meet with him and explain that accessing computer systems without permission is illegal and should not be repeated. At the same time, officials will evaluate his technical knowledge and determine whether his skills could justify reconsidering his admission.

The case has sparked a wider debate about how educational institutions identify and nurture young talent in cybersecurity.

Cybersecurity is a field where practical skills can sometimes be difficult to measure through conventional academic qualifications alone. Some talented individuals develop their abilities independently, experimenting with computer systems and learning techniques outside formal education.

However, experts have repeatedly warned that technical ability does not excuse unauthorised access to computer systems. The same skills used to protect networks can also be used to breach them, making ethics and legal responsibility an important part of cybersecurity education.

For the Indian student, however, the incident could now take an unexpected turn.

What began as an alleged attempt to demonstrate his skills by gaining unauthorised access to institutional websites may ultimately give him the opportunity he originally wanted — a chance to prove that he can study cybersecurity.

The outcome will depend on the results of the special assessment and whether the institute believes his technical capabilities are strong enough to warrant admission.

The case also raises an interesting question for technology institutions: Should exceptional technical talent be judged solely by academic qualifications, or should students who demonstrate unusual practical abilities be given a pathway to prove themselves?