The Actress Who Topped the Merit List: Sunny Leone, Bihar PHED, and the Government Portal That Trusted Everyone

In February 2019, an unidentified prankster entered the name "Sunny Leone" on Bihar's Public Health Engineering Department recruitment portal, claimed 98.5 marks, and watched the official algorithm promote her to Rank 1 on the final provisional merit list — without a single automated check, flag, or sanity filter.

---

On the afternoon of 14 February 2019 — Valentine's Day — a tired government IT technician at the Public Health Engineering Department (PHED) of Bihar compiled a database, sorted it by descending score, exported a multi-hundred-page PDF, and uploaded it to the department's official recruitment portal.

He did not read the top of the list.

By the following morning, aspirants frantically checking their ranks on their mobile screens made a discovery. They refreshed their browsers, scrolled to the very top of the Category 1 (Unreserved) ranking, and found that the most qualified civil engineering candidate in the state of Bihar — according to the government's own official provisional merit list — was a Bollywood actor named Sunny Leone.

Application ID 9887, candidate name: Sunny Leone. Father's name: Leona Leone. Score: 98.50 out of 100.00.

Three ranks below her, at an impressive 92.89 points, sat a candidate whose legal name appeared in the official document as "bvcxzbnnb".

Within six hours, screenshots of the PHED PDF were ricocheting across WhatsApp engineering circles in Patna, Muzaffarpur, Bhagalpur, and Gaya. By evening, they had reached the newsrooms of Hindustan Times, Indian Express, India Today, and NDTV. By the following morning, the story was national news, the subject of parliamentary hallway jokes, and an immortal chapter in the growing anthology of Indian government portal disasters.

Bihar had, accidentally and completely inadvertently, conducted the most glamorous junior engineer recruitment in the country's administrative history.

---

I. The Examination That Was Not an Examination

To understand how a government merit list could end up graced by a Bollywood celebrity and a keyboard smash, it is necessary to understand the specific, unusually relaxed structure of the Bihar PHED Junior Engineer recruitment.

In early 2019, the Public Health Engineering Department of Bihar announced Advertisement No. 01/2019: 214 contractual posts for Junior Engineers (Civil) to work on rural water supply, sewage treatment, and sanitation infrastructure projects across Bihar's 38 districts.

The recruitment was designed to be paperless and rapid. In a break from convention, the department decided there would be no written competitive examination. Candidates would simply upload their diploma credentials and experience details online. The department's computer system would automatically compute a merit score:

• Academic marks: Up to 75 points, calculated by scaling the candidate's diploma aggregate percentage.
• Experience points: Up to 25 points, awarded at a flat rate of 5 points per year of claimed experience in a government or public sector infrastructure project.

The maximum attainable score was 100. The portal was live. Applications were accepted. The system received entries.

The flaw in this architecture was, in retrospect, obvious. There was no Aadhaar-linked identity verification. There was no requirement to upload documentary proof at the time of application — that scrutiny was reserved for a later physical stage. There was no celebrity-name blacklist. There was no text validation to flag anomalous inputs. The system operated on a simple, trusting principle: every field a candidate typed was assumed to be an honest declaration.

It was, effectively, an honour system in digital disguise.

---

II. The Prankster at the Terminal

Sometime in mid-January 2019, an unidentified individual — later traced by the Bihar Police Cyber Cell to an IP address associated with a cyber cafe in an unspecified urban location — opened the PHED online portal and began filling out the Junior Engineer application form.

The details entered into Application ID 9887 were as follows:

• Name: Sunny Leone
• Father's Name: Leona Leone
• Category: Unreserved (General)
• Gender: Female
• Diploma Aggregate Percentage: Approximately 98% (yielding 73.50 academic points out of 75)
• Experience Claimed: Over 5 years of public sector civil engineering work (yielding the maximum 25 experience points)
• Composite Score Auto-Computed by the System: 98.50 / 100

The prankster clicked Submit.

The server accepted the form without hesitation. No error code. No verification trigger. No CAPTCHA challenge related to identity. Simply: "Application submitted successfully. Your Application ID is 9887."

A few positions below the celebrity, another creative soul had submitted an application under the name "bvcxzbnnb" — the kind of randomised keystroke string a person produces by dragging a closed fist across a QWERTY keyboard — and had claimed sufficient marks and experience to score 92.89 points, landing comfortably in the top five.

When the IT team compiled the raw database on 14 February and sorted it in standard descending order by merit score, Sunny Leone emerged at the top of the list with mathematical precision. She had more points than all legitimate engineers. The algorithm, innocent of malice and completely indifferent to Bollywood, promoted her to Rank 1.

The PDF was generated. The PDF was uploaded. The PDF was live.

---

III. How the Internet Found Her

The morning of 15 February 2019 was when real civil engineering diploma-holders — thousands of them, scattered across coaching centres, rented rooms, and family homes across Bihar — began accessing the provisional merit list.

The PDF was 600+ pages long. Most candidates were scrolling down trying to find their own names. A few ambitious ones, certain they had scored well, checked the very top of the list first.

One of them stopped.

A screenshot — capturing Application ID 9887, the name Sunny Leone, and the score 98.50 at Position 1 — was shared into a WhatsApp engineering aspirants group in Patna at approximately 9:40 a.m.

The subsequent diffusion was characteristic of peak-era Indian internet virality:

1. The study group phase (9:40 a.m. – 11:00 a.m.): The screenshot circulated through Bihar-based engineering aspirant WhatsApp groups with reactions ranging from incredulity to laughter.
2. The social media combustion phase (11:00 a.m. – 2:00 p.m.): Twitter accounts in the technology and education space in Delhi and Mumbai picked up the screenshot. The hashtag #SunnyLeone began trending in Bihar, then nationally.
3. The meme creation phase (afternoon): Digital artists and meme pages generated composite images of Sunny Leone in yellow construction helmets, carrying surveyor's levels, personally inspecting sewer lines across rural Sitamarhi. Other memes imagined her CV: "B.Tech Civil, 2009. Rural Infrastructure: 5+ years. Specialisation: Boring wells and drainage design."
4. The press coverage phase (evening): Wire agencies and print reporters filed stories. By midnight, it was on the home pages of national digital news platforms.

The reaction from aspirants was more complex than pure comedy. Many were genuinely furious. The provisional merit list — even if it was explicitly a draft subject to verification — was a government document uploaded on an official state portal. That a prank name had not been detected, had not triggered an internal audit, and had been published without review was a structural failure, not merely a comedic glitch.

As one aspirant posted online:

"We spent three years doing our diploma, another two years studying for recruitment, and we lose Rank 1 to someone who spent five minutes on the internet. The government portal respects everyone equally — it just doesn't verify anyone."

---

IV. What the Authorities Said

By the afternoon of 15 February, state government offices in Patna were fielding calls from reporters, political opposition leaders, and engineering associations.

Vinod Narayan Jha, Bihar's Public Health Engineering Minister at the time, convened a press briefing. His statement was careful, measured, and legally precise:

"What has been published is a purely provisional draft merit list, prepared entirely on the basis of self-declared data uploaded by applicants themselves through the online portal. This document was made publicly available specifically for the purpose of inviting claims, objections, and verification challenges from all stakeholders. No candidate has been appointed. No candidate has been called for an interview. Any person found to have submitted fraudulent credentials — including fake names, false marks, or fabricated experience records — will be identified, prosecuted, and permanently blacklisted from all Bihar government recruitment processes."

Ashok Kumar, Joint Secretary of PHED, confirmed that the department had formally filed a complaint with the Bihar Police Cyber Crime Cell in Patna, providing the server logs containing the IP address and registered mobile number from which Application ID 9887 had been submitted.

The Bihar Police Cyber Cell logged the complaint and initiated a preliminary investigation. The inquiry traced the application to a cyber cafe terminal — a public access device that made individual attribution difficult. No arrest or prosecution was reported in the public record.

---

V. The Aftermath: From Prank to Policy

The document verification stage, scheduled for late February 2019, settled the matter without ceremony. When PHED officers called Application ID 9887's registered mobile number, it was unresponsive — registered to a temporary prepaid SIM that had since been deactivated. No candidate named Sunny Leone appeared at the department's Patna offices bearing an original engineering diploma certificate, caste certificate, or experience letter from a government infrastructure project.

The entry was formally struck from the rolls. "bvcxzbnnb" followed.

The legitimate candidate in the next verified rank was elevated to the top of the merit list.

The broader administrative consequences were more durable:

1. OTP-Authenticated Applications: The National Informatics Centre (NIC), which provides the technical backbone for state government recruitment portals, was instructed by the Bihar government to update its portal template. Mandatory mobile OTP verification linked to the applicant's registered SIM was implemented, ensuring application submission required a live, registered phone.

2. Aadhaar Seeding at Application Stage: Subsequent Bihar recruitment drives required Aadhaar number input at the time of online application, allowing the system to run a basic demographic check against the UIDAI database before accepting the entry.

3. Automated Text Validation: Crude but effective regular-expression filters were integrated to reject names containing obvious keyboard spam strings and flag application entries matching known celebrity name patterns against a curated denylist.

4. Document Upload at Application Stage: Subsequent PHED recruitment drives required scanned copies of diploma certificates and experience letters as PDFs uploaded at submission time — preventing the scenario where claimed data was accepted entirely on trust until physical verification weeks later.

---

VI. The Incident in Context: A Catalogue of Portal Failures

The Sunny Leone merit list incident was not an isolated episode. It sat in a growing archive of similar diagnostic failures across Indian recruitment infrastructure:

• 2015, Midnapore (West Bengal): A student received an ITI Common Entrance Admit Card bearing the photograph of a stray dog rather than his own.
• 2015, Budgam (Jammu & Kashmir): An activist registered a cow under a Kashmiri alias on the J&K BOPEE polytechnic portal to expose the complete absence of identity verification.
• 2018, Faizabad (Uttar Pradesh): A B.Ed candidate received a university admit card printed with Amitabh Bachchan's photograph rather than his own.
• 2024, Kannauj (Uttar Pradesh): History repeated with precise cruelty — a UP Police Constable recruitment admit card was issued bearing Sunny Leone's photograph under the name "Sunny Leon", this time tracing to a cyber cafe in Mahoba district.

What united these cases was not individual cleverness but systemic architecture: recruitment portals that accepted all inputs at face value, processed them automatically, and published the results without human review at any intermediate checkpoint. In a nation conducting recruitment drives covering millions of candidates annually, the absence of elementary validation was not an oversight. It was a structural choice, driven by cost pressure and administrative urgency, that created predictable and demonstrably exploitable vulnerabilities.

The Bihar PHED episode was, in this sense, not merely the punchline of a joke. It was a diagnostic test that a public digital infrastructure had accidentally administered on itself — and comprehensively, publicly failed.

The algorithm had done its job. The algorithm sorted 98.50 above 92.89 above every legitimate engineer in Bihar. The algorithm was not wrong.

The system that trusted the algorithm with unverified inputs was.

---

Chronological Timeline: INC-ABS-2019-BR-001

---

Sources & Further Reading

Tier 1 — Official Records

1. Bihar PHED Advertisement No. 01/2019 — Contractual recruitment of Junior Engineers (Civil). Public Health Engineering Department, Government of Bihar. phed.bih.nic.in
2. PHED Draft Merit List PDF, JE (Civil) 2019 — Published 14 February 2019; archived via web captures.
3. Bihar Police Cyber Crime Cell FIR — Complaint filed by PHED regarding fraudulent Application ID 9887, February 2019.

Tier 2 — Verified Press Coverage

1. "Sunny Leone tops draft merit list for Bihar junior engineer recruitment" — Hindustan Times, 16 February 2019. hindustantimes.com
2. "Sunny Leone tops Bihar PHED junior engineer merit list, department clarifies" — The Indian Express, 16 February 2019. indianexpress.com
3. "Sunny Leone scores 98.5 in Bihar govt exam, tops merit list" — India Today, 16 February 2019. indiatoday.in
4. "Sunny Leone Tops Bihar Exam Merit List. Official Blames 'Prank'" — NDTV, 16 February 2019. ndtv.com