Sunday, April 11, 2021

Upstox alerts users of data breach; says funds, securities remain safe

 Retail broking firm Upstox has alerted customers of a security breach that included contact data and KYC details of customers but assured users that their funds and securities remain safe.


Retail broking firm Upstox has alerted customers of a security breach that included contact data and KYC details of customers but assured users that their funds and securities remain safe.

The development comes close on the heels of reports of data breaches at organizations like MobiKwik, Facebook, and LinkedIn.

"On receipt of e-mails claiming unauthorized access into our database, we have appointed a leading international cyber-security firm to investigate possibilities of breach of some KYC data stored in third-party data warehouse systems.

"This morning, hackers put up a sample of our data on the dark web," a company spokesperson said in an e-mailed statement.

The spokesperson added that as a proactive measure, the company has initiated multiple security enhancements, particularly at the third-party warehouses, real-time 24x7 monitoring, and additional ring-fencing of its network.

"As a matter of abundant caution, we have also initiated a secure password reset via OTP for all Upstox users. Upstox takes customer security extremely seriously.

"Funds and securities of all Upstox customers are protected and remain safe. We have also duly reported this incident to the relevant authorities," the spokesperson said.

The spokesperson further said that at this point, "we don't know with certainty the number of customers whose data has been exposed".

Upstox, which is backed by investors like Tiger Global and Ratan Tata, has over three million users.

No comments:

Post a Comment