Indiabulls Group

Indiabulls Housing (alias Indiabullshousing) is part of the Indiabulls Group, a major Indian financial conglomerate. It operates primarily through its housing finance subsidiary, which offers home loans, loan against property, and related retail finance products. The group also maintains interests in pharmaceuticals and other sectors, reflecting a diversified business model. The organisation provides financial solutions to individual and corporate customers.

The Indiabulls Group is described as a major Indian financial conglomerate, indicating a notable scale of operations within the country. While specific metrics such as asset size or employee count are not provided in the source material, the conglomerate’s stature suggests a substantial market presence. The housing finance subsidiary contributes to the group’s overall footprint in the lending sector.

The housing finance arm focuses on secured lending against residential property, a specialised segment of the financial services industry. Its affiliation with a conglomerate that also includes pharmaceuticals highlights a multi‑sector approach. As a regulated financial entity, it is subject to oversight by banking and housing finance authorities in India. The organisation’s IT environment was noted to include a Citrix Netscaler ADC VPN gateway, a technology commonly used for remote access.

Indiabulls Housing Finance functions as a subsidiary of the Indiabulls Group, with the parent company overseeing multiple business verticals. The subsidiary is governed by the National Housing Bank and Reserve Bank of India regulations concerning housing finance activities. This structure enables shared services while preserving distinct compliance requirements for each business line. The parent‑subsidiary relationship allows for strategic oversight and resource allocation across the group.

On June 22, 2020, the Indiabulls Group experienced a ransomware attack conducted by the CLOP group, which exfiltrated sensitive data from its pharmaceuticals and housing finance subsidiaries. The attackers released file samples and issued a 24‑hour ultimatum to prevent further disclosures. Security analysis identified an exposed Citrix Netscaler ADC VPN gateway vulnerable to CVE‑2019‑19781, with reports indicating that the system remained unpatched for an extended period. Although the exact breach vector has not been confirmed, the incident matches CLOP’s typical pattern of stealing unencrypted files before deploying ransomware to extort payment. The episode underscores the importance of timely patch management and vigilant monitoring of external‑facing infrastructure.