Breaches and incidents
NACH mandate records (India): 273,000 bank-transfer forms from 38 banks exposed in a public S3 bucket
UpGuard found a public Amazon S3 bucket with about 273,000 PDFs of completed National Automated Clearing House (NACH) forms (account numbers, amounts...
- Disclosed
- Verification
- Reported by a reputable outlet, citing the company
What happened
- UpGuard found a public Amazon S3 bucket with about 273,000 PDFs of completed National Automated Clearing House (NACH) forms (account numbers, amounts, contact details) linked to at least 38 banks and financial institutions; files were still being added daily in early September (TechCrunch).
- Root cause: payments firm Nupay confirmed a “configuration gap in an Amazon S3 storage bucket”; the bucket was indexed by Grayhatwarfare.
- Attacker: none known; Nupay said logs showed no unauthorised access, which UpGuard disputed.
- Response: UpGuard alerted NPCI, Aye Finance and CERT-In; data secured after the CERT-In alert. NPCI and Aye Finance denied being the source.