Rejected Applicant Hacks University Website to Showcase Skills, Offered Assessment Instead of Charges

In an unusual turn of events, the Indian Institute of Technology Kanpur (IIT Kanpur) has decided against filing criminal charges against an applicant who breached its official servers following an admission rejection, opting instead to evaluate his technical skills for potential future enrollment.

The student had applied for IIT Kanpur's newly launched Bachelor of Cybersecurity program but failed to make the initial shortlist. In response, he unauthorizedly accessed portions of the websites of both IIT Kanpur and IIT Madras earlier this week, leaving a defacement message on the IIT Kanpur portal reading: "Site is hacked. All I need is just a fair chance."

He subsequently posted screenshots of the breach on Reddit and X (formerly Twitter), asserting that his intention was not to cause damage, but to demonstrate his technical competency after being denied the opportunity to participate in the admission process's hackathon segment.

Addressing the incident, IIT Kanpur Director Manindra Agrawal confirmed that the student had managed to breach certain sections of the institute's web infrastructure. He explained that the applicant was initially filtered out during preliminary screening due to a lack of documented prior experience in cybersecurity.

"As admissions for the current academic session have concluded, immediate enrollment is not possible," Director Agrawal stated. "However, we will invite him to the campus to formally test and evaluate his technical expertise. If he proves his capabilities, he will be given an opportunity during the next admission cycle."

Director Agrawal added that senior faculty members and engineers have been instructed to counsel the student, making it clear that unauthorized entry into any computer network is a violation of the law and must not be repeated.

According to institutional sources, IIT Kanpur initially considered filing a First Information Report (FIR) with the police. However, the management chose to verify his claims and evaluate his potential instead. The institution has a history of encouraging young cybersecurity talent; earlier this year, its C3iHub center provided an opportunity to a youth who discovered security vulnerabilities in the CBSE online marking portal.