Very loose security
Although it's some years ago, I'm not sure how much more secure it is now, it only cost 500 rupees to pay for illegal access to the Aadhar system. The journalist who broke the story was charged with a crime and it took three years for authorities to investigate and drop the case.
https://www.india.com/news/india/aadhaar-details-of-millions-available-at-just-rs-500-could-be-printed-for-rs-300-reveals-investigation-2827394/
https://indianexpress.com/article/india/aadhaar-numbers-for-sale-report-delhi-police-closes-case-on-the-tribune-journalist-7259028/