Kotak Life Insurance

Kotak Life Insurance, operating under the alias Kotaklife, is a life insurance provider headquartered in India. The company offers core life insurance products and services to clients within the Indian market. Its business involves managing sensitive client and partner data through its operational processes. A significant event in its recent history was a cybersecurity incident where the Clop ransomware group exploited a zero-day vulnerability in the MOVEit Transfer application to breach the company's systems. This attack resulted in the theft of sensitive data, which was later released on the dark web. The incident was not isolated, as it was part of a larger global campaign targeting organizations using the MOVEit file transfer platform.

Following the breach, Kotak Life Insurance publicly communicated that the incident had a limited impact, specifically affecting its file transfer process. The company asserted that its core IT network and customer services remained uncompromised, indicating a containment of the intrusion to a specific application. This distinction between the compromised file transfer system and the integrity of the broader network and services was a key part of their official statement. The event underscores the vulnerability of third-party software supply chains and the targeted nature of such campaigns against the financial and insurance sector in India, with Kotak Life Insurance being a documented victim among several others in the region.