Setting the Record Straight: On Allegations of Hacking, Trolling, and Digital Accountability

A Technical and Evidentiary Clarification for Media Outlets and Industry Professionals

This clarification is published  by a representative of the Third-Party Registrant of utsavmukherjee.in in the public interest and in response to inaccurate public characterisations of the administrative history of accounts managed by that Registrant.

1. Definition of "Hacking" (for clarity of terminology)

For the purposes of accuracy, "hacking" refers to unauthorised access to an account or system resulting in loss of control by the legitimate user. In such circumstances, the account holder is typically unable to log in, post content, modify settings, or otherwise exercise control over the account.

The factual circumstances described below do not, on their face, align with this definition.

2. Facebook Page Administration — Documented Account History

The Facebook page associated with Mr. Utsav Mukherjee was created and initially administered by a third-party administrator. Mr. Mukherjee was subsequently granted access in the form of a page role. He was not the original creator of the page.

In or around July 2022, the third-party administrator removed their own administrative access. This action is documented by a Facebook Security Team notification, which records the device, timestamp, and IP address geolocation data. The format and content of this notification are consistent with standard platform alerts generated following authorised administrative actions.

Following this event, administrative control of the page remained with Mr. Mukherjee.

There is no evidence, based on available records, that Mr. Mukherjee lost access to his personal Facebook account at any material time. On the contrary, his account activity continued, including the publication of videos, professional updates, and personal content.

Continued, uninterrupted access and posting capability are not typically consistent with a loss of control scenario.

3. Instagram Account — Ownership and Access Clarification

The Instagram account identified as @utsavmkj was created by a third-party administrator and the account biography included a disclaimer indicating that it was not owned by him.

The linkage between this Instagram account and Mr. Mukherjee's Facebook profile appears to have been established using valid Facebook login credentials. Such a connection ordinarily requires authentication by the account holder.

There is no evidence that the third-party administrator had access to Mr. Mukherjee's personal login credentials at any material time.

4. Nature of Online Trolling — Factual Characterisation

It is acknowledged that Mr. Mukherjee was the subject of online trolling. However, based on available information:

The content in question appears to have been derived from publicly available material originating from Mr. Mukherjee's own social media activity.

There is no substantiated evidence, on the present record, of fabricated or synthetically generated content.

There is no documented evidence of threats of physical harm.

The material appears to constitute commentary on a public figure based on publicly accessible information. Online commentary of this nature does not, in itself, constitute unauthorised system access.

It is further noted that similar trolling activity affected multiple associated accounts, suggesting a broader pattern rather than an isolated, targeted system intrusion.

5. Platform Behaviour — Technical Context

(a) Resurfacing of Archived Content

Meta platforms, including Facebook, are known to resurface archived or older content through automated features including memories, resharing prompts, and algorithmic adjustments. Such resurfacing can occur without manual intervention and is a documented platform behaviour.

(b) Password Reset Notifications

Meta has publicly acknowledged instances in which password reset requests could be triggered by external parties without resulting in account compromise. In January 2026 Meta confirmed and fixed a platform vulnerability that allowed third parties to trigger password reset emails for Instagram users, stating explicitly that no breach of systems occurred and that accounts remained secure. A reset notification, in isolation, does not establish that an account has been accessed or taken over. Successful compromise would require completion of the verification process by the account holder.

Accordingly, the existence of such notifications is not, without more, determinative evidence of hacking. An administrator who responded to such notifications by taking protective security measures was acting in accordance with Meta's own guidance.

6. Evidentiary Inconsistencies Requiring Scrutiny

In assessing public claims of hacking or cyber intrusion, the following questions arise from the available record:

How was continuous posting activity maintained if account control had been lost?

What evidence demonstrates unauthorised access, as distinct from administrative changes or third-party withdrawal of access?

What specific instances of fabricated or manipulated content can be identified and independently verified?

What technical evidence — including login anomalies, access logs, or forensic reports — substantiates a claim of compromise?

These are standard evidentiary considerations in any assessment of alleged cyber intrusion. They remain, on the present record, unanswered.

7. Legal Record

In written correspondence dated October 31, 2025, legal counsel representing Mr. Mukherjee confirmed in writing that Mr. Mukherjee had sought help from the Third-Party Registrant to recover access to his accounts, and that the Registrant had voluntarily extended assistance for this purpose. This correspondence confirms that Mr. Mukherjee was aware of the identity of the administrator, approached them voluntarily for assistance, and was granted that assistance.

This written confirmation is difficult to reconcile with a claim of unauthorised access or hacking.

DocuSign Reference: AFE730E9-CF2C-47D5-8EAB-2C70644F4BA8

8. Timing of Online Activity and Professional Releases

Assertions that online trolling coincided with professional activity and therefore constitutes coordinated industry sabotage remain speculative in the absence of corroborating evidence.

Online commentary — particularly where based on publicly available information — may arise organically and does not, without more, establish coordinated intent or conspiracy.

9. Digital Accountability

The management of digital assets — including social media accounts, administrative access, and supporting infrastructure — carries inherent responsibility.

Where access has been granted by a third party and later withdrawn, this does not, in itself, constitute unauthorised access or hacking. It may instead reflect a change in administrative arrangements or the termination of a voluntary management engagement.

10. Availability of Supporting Documentation

The following materials are stated to be available for independent review by bona fide journalists and legal professionals upon formal request:

Platform-generated security notifications including the documented July 2022 Facebook administrative removal notification

Account administration records

Legal correspondence dated October 31, 2025 including DocuSign reference AFE730E9-CF2C-47D5-8EAB-2C70644F4BA8

Publicly documented Meta platform statements regarding password reset vulnerability

Any definitive conclusion should be grounded in a full review of such materials.

11. Concluding Position

Based on the information presently available, the circumstances described are not, on their face, consistent with a conventional definition of hacking involving unauthorised access and loss of control.

Media reporting and professional commentary should therefore distinguish carefully between verified system compromise and disputes concerning account administration, content, or online commentary.

Failure to maintain this distinction risks mischaracterising technical facts and may lead to inaccurate public narratives.

Published by a representative of the Third-Party Registrant of utsavmukherjee.in. All supporting documentation is retained in full and available to any legitimate journalist, legal professional, or industry body making formal enquiries.