Breaches and incidents
Angel One (India): AWS resources compromised, client data leak flagged by a dark-web monitor
Exchange filing of 28 Feb 2025: the broker received “data leakage post” alerts from its dark-web monitoring partner on 27 Feb 2025 “informing of...
- Disclosed
- Verification
- Checked against a primary source
What happened
- Exchange filing of 28 Feb 2025: the broker received “data leakage post” alerts from its dark-web monitoring partner on 27 Feb 2025 “informing of unauthorised access of our clients’ data”, and found “some of Angel One’s AWS resources were compromised”. It says the breach does not affect clients’ securities, funds and credentials. Data types and numbers were not disclosed (SecurityWeek).
- Root cause: not disclosed. The company “immediately changed all related credentials of its AWS cloud and other applications”.
- Attacker: not named.
- Response: external forensic partner engaged; shares fell more than 11% over two days.