Breaches and incidents
Wisdom Finance, Bengaluru (India): Rs 47 crore moved through the lender’s API in 1,782 transfers in about 2.5 hours
On the night of 6 Oct 2025 attackers made 1,782 unauthorised transfers to 656 bank accounts in about two and a half hours; about Rs 10 crore was recovered.
- Disclosed
- Verification
- Confirmed by two or more outlets
What happened
- On the night of 6 Oct 2025 attackers made 1,782 unauthorised transfers to 656 bank accounts in about two and a half hours; about Rs 10 crore was recovered. The Cyber Express names the victim “Wisdom Finance Pvt. Ltd.” and puts the loss at Rs 47 crore; News Karnataka does not name the firm and gives Rs 49 crore.
- Root cause per Bengaluru police: the transactions did not come from the firm’s registered IPs but from rented servers (traced to Hong Kong and Lithuania IPs, hosted at Webyne Data Centre); hired Hong Kong-based hackers “exploited security vulnerabilities” in the firm’s API systems (The Cyber Express). News Karnataka says preliminary analysis points to stolen credentials obtained by phishing or a system vulnerability, with a forensic audit under way.
- Attacker: two Dubai-based Indians allegedly hired the hackers; Bengaluru CCB arrested a mule-account supplier from Udaipur and a man from Belagavi who allegedly bought the IP addresses. Commissioner Seemant Kumar Singh: “This is the first of its kind of case cracked by the CCB team.”
- Response: CCB investigation, accounts frozen, foreign agencies approached.