https://vulnpocalypse.dev/feeds/Breaches and advisories naming victims in India.enThu, 12 Nov 2026 16:59:02 +0000https://vulnpocalypse.dev/advisories/bank-of-baroda-data-leak-2026/https://vulnpocalypse.dev/advisories/bank-of-baroda-data-leak-2026/Thu, 12 Nov 2026 12:00:00 +0000Bank of Baroda says a compromised employee email account exposed "certain data" after TripleX posted files said to hold KYC and loan documents on 24 Jul 2026.breachhttps://vulnpocalypse.dev/advisories/tata-motors-connected-car-app-flaws/https://vulnpocalypse.dev/advisories/tata-motors-connected-car-app-flaws/Wed, 11 Nov 2026 12:00:00 +0000CERT-In CIVN-2026-0537 details four high-severity flaws in Tata Motors iRA apps that let attackers impersonate car owners. Patched in iRA 2.0 26.8.2 / iRA.ev.exploitedhttps://vulnpocalypse.dev/advisories/au-small-finance-bank-probes-salesforce-hosted-data-leak-after-scarlettgroup-ext/https://vulnpocalypse.dev/advisories/au-small-finance-bank-probes-salesforce-hosted-data-leak-after-scarlettgroup-ext/Wed, 11 Nov 2026 12:00:00 +0000AU Small Finance Bank is investigating a possible leak on a Salesforce-hosted platform after a group claimed it stole customer KYC and loan data; claims arebreachhttps://vulnpocalypse.dev/advisories/gmo-internet-and-park24-disclose-cyberattacks-and-pay-users-report-says/https://vulnpocalypse.dev/advisories/gmo-internet-and-park24-disclose-cyberattacks-and-pay-users-report-says/Wed, 11 Nov 2026 12:00:00 +0000GMO Internet Group and Park24 say they will compensate users after cyberattacks, Indian Express reports; customers should follow company notices.breachhttps://vulnpocalypse.dev/advisories/emudhra-intermediate-ca-compromise/https://vulnpocalypse.dev/advisories/emudhra-intermediate-ca-compromise/Wed, 11 Nov 2026 12:00:00 +0000Eight eMudhra intermediate CA keys were guessable. Browsers block them; update CA bundles and runtimes, and replace TLS certs under emSign ECC Root CA - G3.ecosystemhttps://vulnpocalypse.dev/advisories/crafty-falcon-ai-attacks-indian-nbfcs-payment-apis/https://vulnpocalypse.dev/advisories/crafty-falcon-ai-attacks-indian-nbfcs-payment-apis/Wed, 11 Nov 2026 12:00:00 +0000CERT-In advisory CIAD-2026-0058 names CRAFTY FALCON, an AI-assisted actor invoking Indian NBFC and fintech payment APIs to move funds at machine speed.ai-toolshttps://vulnpocalypse.dev/advisories/orova-ransomware-group-claims-attack-on-herminio-india-precision-technology/https://vulnpocalypse.dev/advisories/orova-ransomware-group-claims-attack-on-herminio-india-precision-technology/Tue, 10 Nov 2026 12:00:00 +0000RansomLook reports orova lists Herminio India Precision Technology on its leak site; unconfirmed, so watch for a company statement.breachhttps://vulnpocalypse.dev/advisories/india-today-reports-leaked-india-pricing-for-meta-muse-ai-agent/https://vulnpocalypse.dev/advisories/india-today-reports-leaked-india-pricing-for-meta-muse-ai-agent/Tue, 10 Nov 2026 12:00:00 +0000India Today reports leaked India pricing for Meta's Muse AI agent and notes CAPTCHA concerns; no flaw confirmed, review bot defenses.ai-toolshttps://vulnpocalypse.dev/advisories/state-bank-of-india-confirms-leak-of-3897-customer-records-with-pii-and-loan-dat/https://vulnpocalypse.dev/advisories/state-bank-of-india-confirms-leak-of-3897-customer-records-with-pii-and-loan-dat/Mon, 09 Nov 2026 12:00:00 +0000SBI says 3,897 customer records with personal and loan data were leaked, about 375,000 records are under review, and its inquiry is not finished.breachhttps://vulnpocalypse.dev/advisories/ao3-fan-fiction-archive-offline-after-cyberattack-times-of-india-reports/https://vulnpocalypse.dev/advisories/ao3-fan-fiction-archive-offline-after-cyberattack-times-of-india-reports/Sat, 07 Nov 2026 12:00:00 +0000Times of India reports AO3 has been offline since October 29 after a cyberattack, users who reused their AO3 password elsewhere should change it.ecosystemhttps://vulnpocalypse.dev/advisories/india-today-reports-cert-in-alert-urging-android-14-to-17-november-patch/https://vulnpocalypse.dev/advisories/india-today-reports-cert-in-alert-urging-android-14-to-17-november-patch/Fri, 06 Nov 2026 12:00:00 +0000India Today reports CERT-In warned of flaws in Android 14 to 17 Framework and System components; install the November 2026 security patch.exploitedhttps://vulnpocalypse.dev/advisories/business-standard-reports-china-linked-tools-in-ai-driven-attacks-on-indian/https://vulnpocalypse.dev/advisories/business-standard-reports-china-linked-tools-in-ai-driven-attacks-on-indian/Fri, 06 Nov 2026 12:00:00 +0000Business Standard reports China-linked tools were used in AI-driven attacks on Indian financial firms; details unconfirmed, so monitor the story.ai-toolshttps://vulnpocalypse.dev/advisories/the420in-reports-ed-attached-about-4-crore-in-mumbai-extortion-case/https://vulnpocalypse.dev/advisories/the420in-reports-ed-attached-about-4-crore-in-mumbai-extortion-case/Thu, 05 Nov 2026 12:00:00 +0000The420.in reports the ED provisionally attached about ₹4 crore in a Mumbai money laundering case; no software or security action applies.breachhttps://vulnpocalypse.dev/advisories/mint-reports-gigabyte-40th-anniversary-promo-no-security-incident-stated/https://vulnpocalypse.dev/advisories/mint-reports-gigabyte-40th-anniversary-promo-no-security-incident-stated/Thu, 05 Nov 2026 12:00:00 +0000Mint reports a GIGABYTE 40th anniversary promotion in India and states no security incident; no action is needed beyond verifying offers.ecosystemhttps://vulnpocalypse.dev/advisories/etciso-reports-rbi-tightens-scrutiny-of-bank-apis-after-fraud-incidents/https://vulnpocalypse.dev/advisories/etciso-reports-rbi-tightens-scrutiny-of-bank-apis-after-fraud-incidents/Thu, 05 Nov 2026 12:00:00 +0000ETCISO reports RBI, CERT-In and I4C warnings on API and AI-driven fraud at Indian lenders; review API credentials and exposure.exploitedhttps://vulnpocalypse.dev/advisories/artex-docker-image-backdoored-researcher-says-cert-in-flags-crafty-falcon/https://vulnpocalypse.dev/advisories/artex-docker-image-backdoored-researcher-says-cert-in-flags-crafty-falcon/Thu, 05 Nov 2026 12:00:00 +0000A researcher reports a backdoored ARTEX Docker image giving unauthenticated root shells; remove any ARTEX install built from unvetted images.supply-chainhttps://vulnpocalypse.dev/advisories/cert-in-gets-access-to-anthropics-claude-mythos-to-test-vulnerabilities-after-ro/https://vulnpocalypse.dev/advisories/cert-in-gets-access-to-anthropics-claude-mythos-to-test-vulnerabilities-after-ro/Wed, 04 Nov 2026 12:00:00 +0000India's CERT-In reportedly has access to Anthropic's Claude Mythos for closed-environment vulnerability testing after AI agents accessed Indian systems withoutai-toolshttps://vulnpocalypse.dev/advisories/openai-partners-with-cathedral-systems-raises-bug-bounty-india-today-reports/https://vulnpocalypse.dev/advisories/openai-partners-with-cathedral-systems-raises-bug-bounty-india-today-reports/Tue, 03 Nov 2026 12:00:00 +0000India Today reports OpenAI raised critical bug bounties to up to $172,000; researchers should confirm current terms with OpenAI before submitting.ai-toolshttps://vulnpocalypse.dev/advisories/spandana-sphoorty-financial-india-about-rs-78-crore-moved-out-of-a/https://vulnpocalypse.dev/advisories/spandana-sphoorty-financial-india-about-rs-78-crore-moved-out-of-a/Sun, 01 Nov 2026 12:00:00 +0000The microfinance NBFC disclosed on 2 Nov 2026 that about Rs 7.8 crore was transferred from one of its bank accounts to multiple beneficiary accounts on 1...breachhttps://vulnpocalypse.dev/advisories/capillary-technologies-india-eur-304-million-lost-to-payment/https://vulnpocalypse.dev/advisories/capillary-technologies-india-eur-304-million-lost-to-payment/Sat, 31 Oct 2026 12:00:00 +0000Capillary (Bengaluru SaaS, NSE: CAPILLARY) told the exchanges that four payments totalling EUR 3,041,169.90 were made from SessionM Czech Republic s.r.o.breachhttps://vulnpocalypse.dev/advisories/windlas-biotech-india-cyber-security-incident-disclosed-same-day/https://vulnpocalypse.dev/advisories/windlas-biotech-india-cyber-security-incident-disclosed-same-day/Fri, 30 Oct 2026 12:00:00 +0000The Dehradun pharma contract manufacturer told the exchanges it experienced a cyber security incident on 30 Oct 2026 with no material impact on core...breachhttps://vulnpocalypse.dev/advisories/mr-robot-android-banking-trojan-service-targets-indian-bank-customers-with-fake/https://vulnpocalypse.dev/advisories/mr-robot-android-banking-trojan-service-targets-indian-bank-customers-with-fake/Thu, 29 Oct 2026 12:00:00 +0000MR ROBOT is a rented Android banking trojan platform that steals OTPs and card data and forwards calls from Indian bank customers' phones.ecosystemhttps://vulnpocalypse.dev/advisories/kamalnayan-bajaj-hospital-chhatrapati-sambhajinagar-india-ransomware/https://vulnpocalypse.dev/advisories/kamalnayan-bajaj-hospital-chhatrapati-sambhajinagar-india-ransomware/Wed, 28 Oct 2026 12:00:00 +0000Per Medical Dialogues, the hospital management information system stopped working around 3 am on 18 Oct.breachhttps://vulnpocalypse.dev/advisories/intellect-design-arena-india-canadian-subsidiary-employee-mailbox/https://vulnpocalypse.dev/advisories/intellect-design-arena-india-canadian-subsidiary-employee-mailbox/Wed, 28 Oct 2026 12:00:00 +0000The Chennai banking-software vendor said an employee's email account at its Canadian subsidiary was compromised and used to send fake payment instructions...breachhttps://vulnpocalypse.dev/advisories/the-hindu-reports-cbfc-e-cinepramaan-application-data-exposed-on-internet/https://vulnpocalypse.dev/advisories/the-hindu-reports-cbfc-e-cinepramaan-application-data-exposed-on-internet/Mon, 26 Oct 2026 12:00:00 +0000The Hindu reports CBFC e-Cinepramaan filings for over 500 titles sat exposed on the Internet Archive; applicants should review what they filed.breachhttps://vulnpocalypse.dev/advisories/telangana-tg-ipass-india-suspected-ransomware-encrypts-industrial/https://vulnpocalypse.dev/advisories/telangana-tg-ipass-india-suspected-ransomware-encrypts-industrial/Mon, 26 Oct 2026 12:00:00 +0000Per Telangana Today, the TG-iPASS portal has been disrupted since 22 Oct after a suspected ransomware attack.breachhttps://vulnpocalypse.dev/advisories/latteys-industries-india-boss-scam-impersonating-the-md-moves-rs-80/https://vulnpocalypse.dev/advisories/latteys-industries-india-boss-scam-impersonating-the-md-moves-rs-80/Mon, 26 Oct 2026 12:00:00 +0000The Ahmedabad pump maker said fraudulent instructions from someone impersonating the Managing Director reached the Company Secretary, and Rs 80,00,000 was...breachhttps://vulnpocalypse.dev/advisories/central-board-of-film-certification-india-ecinepramaan-documents-for/https://vulnpocalypse.dev/advisories/central-board-of-film-certification-india-ecinepramaan-documents-for/Sun, 25 Oct 2026 12:00:00 +0000The Hindu reported (Sunday 25 Oct) that shooting scripts, CBFC cut lists and distribution agreements (some with payment amounts not fully redacted) for...breachhttps://vulnpocalypse.dev/advisories/cert-in-india-october-2026-advisories-flag-in-the-wild-exploitation/https://vulnpocalypse.dev/advisories/cert-in-india-october-2026-advisories-flag-in-the-wild-exploitation/Thu, 22 Oct 2026 12:00:00 +0000CIAD-2026-0047 (14 Oct) says CVE-2026-96951, a Windows Shell command-injection flaw that bypasses security features when a user opens a crafted file, "is...breachhttps://vulnpocalypse.dev/advisories/amagi-media-labs-india-extortion-attempt-over-claimed-theft-of/https://vulnpocalypse.dev/advisories/amagi-media-labs-india-extortion-attempt-over-claimed-theft-of/Thu, 22 Oct 2026 12:00:00 +0000The Bengaluru broadcast-cloud company disclosed that a threat actor claims to hold operational and network configuration data for some of its systems and...breachhttps://vulnpocalypse.dev/advisories/rajasthan-police-india-scarlettgroup-claims-police-and-state-it-data/https://vulnpocalypse.dev/advisories/rajasthan-police-india-scarlettgroup-claims-police-and-state-it-data/Wed, 21 Oct 2026 12:00:00 +0000Business Today (21 Oct) reported that a group calling itself ScarlettGroup posted on BreachForums (first flagged by FalconFeeds) that "We have breached...breachhttps://vulnpocalypse.dev/advisories/coindcx-1599m-usdt-lost-from-wallets-compromised-in-its-july-2025-hack/https://vulnpocalypse.dev/advisories/coindcx-1599m-usdt-lost-from-wallets-compromised-in-its-july-2025-hack/Wed, 21 Oct 2026 12:00:00 +000021 Oct 2026: analysts flagged about 15.99M USDT moving from a CoinDCX-linked wallet.breachhttps://vulnpocalypse.dev/advisories/hyderabad-nbfc-unnamed-india-rs-33-crore-drained-through-its-systems/https://vulnpocalypse.dev/advisories/hyderabad-nbfc-unnamed-india-rs-33-crore-drained-through-its-systems/Mon, 19 Oct 2026 12:00:00 +0000Per the CFO's complaint to the Telangana Cyber Security Bureau (TGCSB).breachhttps://vulnpocalypse.dev/advisories/central-bank-of-india-india-rs-1397-crore-taken-from-its-rbi/https://vulnpocalypse.dev/advisories/central-bank-of-india-india-rs-1397-crore-taken-from-its-rbi/Sat, 17 Oct 2026 12:00:00 +0000Per the bank's police complaint: 6 transfers on 15 Oct, 88 on 16 Oct and 93 on 17 Oct 2026, 187 in all, to 36 recipient accounts.breachhttps://vulnpocalypse.dev/advisories/metro-brands-india-active-directory-intrusion-with-privileged/https://vulnpocalypse.dev/advisories/metro-brands-india-active-directory-intrusion-with-privileged/Thu, 15 Oct 2026 12:00:00 +0000The footwear retailer (Metro, Mochi, Walkway) reported unauthorised activity in its IT infrastructure including Active Directory, found through security...breachhttps://vulnpocalypse.dev/advisories/vibetech-india-unsecured-database-of-137-million-aggregated-breach/https://vulnpocalypse.dev/advisories/vibetech-india-unsecured-database-of-137-million-aggregated-breach/Tue, 13 Oct 2026 12:00:00 +0000Researcher Jeremiah Fowler found an unprotected database of 13.7 million records with names, phone numbers, emails, plaintext passwords and bank details...breachhttps://vulnpocalypse.dev/advisories/indira-ivf-india-indiraivfcom-transferred-out-without-authorisation/https://vulnpocalypse.dev/advisories/indira-ivf-india-indiraivfcom-transferred-out-without-authorisation/Mon, 12 Oct 2026 12:00:00 +0000MediaNama, analysing the UDRP decision, reports the fertility chain's domain was moved out of its account on 31 Oct 2024 without authorisation and noticed...breachhttps://vulnpocalypse.dev/advisories/western-capital-advisors-india-rs-1896-crore-drained-through-icici/https://vulnpocalypse.dev/advisories/western-capital-advisors-india-rs-1896-crore-drained-through-icici/Fri, 09 Oct 2026 12:00:00 +0000NSE filing of 10 Oct 2026: 695 unauthorised IMPS debits totalling Rs 18,96,07,563 from five ICICI Bank current accounts, from 07:26 IST on 8 Oct to 12:40...breachhttps://vulnpocalypse.dev/advisories/nbfcs-digital-lenders-and-fintechs-india-cert-in-warns-of-payout-api/https://vulnpocalypse.dev/advisories/nbfcs-digital-lenders-and-fintechs-india-cert-in-warns-of-payout-api/Fri, 09 Oct 2026 12:00:00 +0000CERT-In advisory CIAD-2026-0046, "Threat Actors Exploiting Payment and Disbursement APIs for Unauthorized Fund Transfers in BFSI Entities", issued 9 Oct...breachhttps://vulnpocalypse.dev/advisories/cert-in-csirt-fin-india-attackers-invoke-nbfc-and-fintech-payout-apis/https://vulnpocalypse.dev/advisories/cert-in-csirt-fin-india-attackers-invoke-nbfc-and-fintech-payout-apis/Fri, 09 Oct 2026 12:00:00 +0000Advisory CIAD-2026-0046 (severity Critical) says CERT-In/CSIRT-Fin observed multiple campaigns against NBFCs, digital lenders, fintechs, payment service...breachhttps://vulnpocalypse.dev/advisories/cr-healthcare-services-hyderabad-india-ransomware-encrypts-patient/https://vulnpocalypse.dev/advisories/cr-healthcare-services-hyderabad-india-ransomware-encrypts-patient/Tue, 29 Sep 2026 12:00:00 +0000Telangana Today reports the health-tech firm's systems and patient records on its platform were encrypted around 29 Sep.breachhttps://vulnpocalypse.dev/advisories/kerala-general-administration-department-india-website-defaced-with/https://vulnpocalypse.dev/advisories/kerala-general-administration-department-india-website-defaced-with/Sun, 27 Sep 2026 12:00:00 +0000The GAD website homepage was replaced on the morning of 27 Sep with a Pakistani flag and pro-Pakistan messages (Deccan Chronicle, Organiser).breachhttps://vulnpocalypse.dev/advisories/sidecopy-india-reverserat-spear-phishing-expands-to-indian-academic/https://vulnpocalypse.dev/advisories/sidecopy-india-reverserat-spear-phishing-expands-to-indian-academic/Tue, 22 Sep 2026 12:00:00 +0000Trellix researchers (reported by The Hacker News) found SideCopy targeting academic institutions in India, a widening from its usual defence and government...breachhttps://vulnpocalypse.dev/advisories/transparent-tribe-apt36-india-operation-rapidrust-rust-backdoor-uses/https://vulnpocalypse.dev/advisories/transparent-tribe-apt36-india-operation-rapidrust-rust-backdoor-uses/Wed, 16 Sep 2026 12:00:00 +0000Zscaler ThreatLabz documented four new tools used against government and defence organisations in India and Afghanistan, with most post-compromise activity...breachhttps://vulnpocalypse.dev/advisories/renova-petech-india-noida-fintechs-server-and-api-portal-used-to-move/https://vulnpocalypse.dev/advisories/renova-petech-india-noida-fintechs-server-and-api-portal-used-to-move/Sun, 13 Sep 2026 12:00:00 +0000On 13 Sep 2026, from early afternoon to about 8 pm, cybercriminals hacked the server of Renova Petech Private Limited (recharges, bill payments...breachhttps://vulnpocalypse.dev/advisories/gujarat-mineral-development-corporation-india-cert-in-flags-probable/https://vulnpocalypse.dev/advisories/gujarat-mineral-development-corporation-india-cert-in-flags-probable/Fri, 04 Sep 2026 12:00:00 +0000The Gujarat state-owned mining company (listed) disclosed that CERT-In informed it of a probable data breach pertaining to https://www.gmdcltd.com.breachhttps://vulnpocalypse.dev/advisories/nia-gujarat-ats-india-anonsec-ddos-case-over-attacks-on-54-central/https://vulnpocalypse.dev/advisories/nia-gujarat-ats-india-anonsec-ddos-case-over-attacks-on-54-central/Mon, 24 Aug 2026 12:00:00 +0000Gujarat ATS arrested Jaseem Shahnawaz Ansari of Nadiad and booked a juvenile in May 2025 for over 50 DDoS attacks on central and state government sites...breachhttps://vulnpocalypse.dev/advisories/vimta-labs-india-cyber-incident-on-part-of-it-infrastructure/https://vulnpocalypse.dev/advisories/vimta-labs-india-cyber-incident-on-part-of-it-infrastructure/Fri, 21 Aug 2026 12:00:00 +0000The Hyderabad contract research and testing lab said it recently detected an incident affecting part of its IT infrastructure.breachhttps://vulnpocalypse.dev/advisories/lenskart-india-incident-at-a-sub-vendor-of-its-singapore-unit/https://vulnpocalypse.dev/advisories/lenskart-india-incident-at-a-sub-vendor-of-its-singapore-unit/Thu, 20 Aug 2026 12:00:00 +0000Lenskart disclosed a cyber incident at a sub-vendor of group company Lenskart Solutions Pte.breachhttps://vulnpocalypse.dev/advisories/cg-power-and-industrial-solutions-india-suspected-cyber-event-on-it/https://vulnpocalypse.dev/advisories/cg-power-and-industrial-solutions-india-suspected-cyber-event-on-it/Tue, 18 Aug 2026 12:00:00 +0000The Murugappa group electrical equipment maker disclosed a suspected cyber event on its IT systems with no impact on core systems and operations.breach