Breaches and incidents
Himachal Pradesh State Co-operative Bank (India): Rs 11.55 crore moved through one customer’s mobile banking
Fraudsters used a customer’s mobile banking app (Hatli branch, Chamba) to send Rs 11.55 crore to 20 accounts on 11 and 12 May 2025.
- Disclosed
- Verification
- Confirmed by two or more outlets
What happened
- Fraudsters used a customer’s mobile banking app (Hatli branch, Chamba) to send Rs 11.55 crore to 20 accounts on 11 and 12 May 2025; it surfaced on 14 May when the RBI transaction report arrived, 13 May being a holiday (PTI via The Week). The Tribune names the Himpesa app and says NEFT and RTGS were used.
- Root cause: not published. A CERT-In team helped establish how the app was abused but the technique was not disclosed.
- Attacker: four people from Mumbai, Delhi, Rajasthan and Uttar Pradesh were arrested by June 2025 (DIG Cyber Crime Mohit Chawla, via The Tribune).
- Response: FIR at Shimla Sadar; CERT-In joined the probe. MD Shravan Manta said “No customer has suffered any financial loss”; the bank cited cyber insurance and approved a core banking upgrade to Finacle 10.2.25.