Although unlike in 2021 https://freepresskashmir.news/2021/02/06/hacker-group-allegedly-leaked-data-of-army-personnel-in-jk-claims-report-airtel-denies when https://cisomag.com/airtel-data-leak-exposes-critical-data it was verified (die to the sample data)
in this one, there is no verification or authenticity yet.
By the way, any agent/retailer or shop that processes SIM replacement requests.. too get access to names and so on.
Like of one walks into a store or retsilshop that SIM of x×x×x×x×x× is damaged and needs to be replaced
immediately upon checking in the TelCo's application/ software .. retailer/shop keeper will see the name of the customer and require live photograph and a photocopy of the ID proof.
Even retailer can thus see the data like address, photograph.
Data privacy is not strictly enforced in India... Specific privacy laws have to be introduced like other countries. With Digital India journey this is much needed