Investigation Overview
The Central Bureau of Investigation (CBI) has formally filed a chargesheet against 13 individuals allegedly involved in the systemic leak of the National Eligibility cum Entrance Test (NEET) UG 2026 question paper. The chargesheet, submitted to the Special Fast Track Court at Rouse Avenue, outlines a sophisticated operation that compromised the integrity of the May 3, 2026, examination.
Investigators allege that the accused utilized a coercive security model to ensure payment from candidates. Yash Yadav, a key defendant, was tasked with collecting Class X and XII educational certificates and signed blank cheques from candidates as collateral. These documents, intended to guarantee payment for the leaked material, were later recovered by authorities from a hostel room at the Mahatma Gandhi Medical College in Jaipur.
Modus Operandi and Digital Evidence
The CBI’s investigation reveals a structured distribution chain. Yash Yadav reportedly procured the leaked materials from Shubham Madhukar Khairnar, who operated under the alias “Ap Broker.” Digital forensics conducted on Yadav’s mobile device uncovered persistent communication between late April and early May 2026, detailing the logistics of the leak.
WhatsApp records identified files labeled “ph.com (1).pdf,” “BT chem.pdf,” and “BT bio.pdf,” which contained unauthorized Biology and Chemistry questions. The Central Forensic Science Laboratory (CFSL) confirmed that handwriting found on physical printouts recovered from Yadav’s residence in Gurugram matched the documents circulating within the network. Furthermore, the Government Examiner of Questioned Documents (GEQD) traced the chain of custody back to Manisha Sanjay Waghmare, indicating a coordinated multi-state operation.
The Distribution Network
The investigation established that Shubham Madhukar Khairnar served as a central node in the conspiracy. According to the chargesheet, Khairnar procured the original questions from Dhananjay Nivrutti Lokhande, organized printing operations in Nashik, and managed student logistics in Panchak. Call detail record (CDR) analysis confirmed that Khairnar maintained a network of communication with intermediaries and candidates across Faridabad, Jammu, and other regions, facilitating the exchange of money for the leaked content.
Witness testimonies corroborated the digital findings, with one individual confirming the collection of original educational credentials from Mangilal Biwal and Dinesh Biwal as security for the illegal access. The CBI continues to analyze the network’s financial transactions to identify further accomplices and beneficiaries.