Upstox

Upstox is an Indian brokerage firm operating within the country's financial services sector. It provides brokerage services to its clients, facilitating investment activities. The company maintains a significant online presence, handling sensitive customer data as part of its core operations. This includes personal identification details and financial information necessary for account management and regulatory compliance.

In April 2021, Upstox experienced a significant cybersecurity breach. Sensitive data belonging to approximately 2.5 million users was exposed and subsequently appeared on the dark web. The compromised information included names, email addresses, dates of birth, bank account details, and a substantial volume of Know Your Customer documents, estimated at around 56 million files. An independent researcher disclosed the incident publicly. Following the breach, Upstox initiated several security measures, including resetting user passwords, restricting database access, and implementing enhanced security protocols at third-party data warehouses used by the company. While acknowledging the breach and taking remedial actions, Upstox did not publicly confirm the full extent of accounts impacted. This incident occurred during a period marked by several similar security breaches affecting various Indian digital service providers.