Upstox

In April 2021 the Indian stock brokerage firm Upstox suffered a significant data breach after an unauthorized third party gained access to its database via compromised credentials. The leak exposed sensitive Know Your Customer KYC details and personal data of millions of users. The breach involved the exposure of database backups containing user profiles and financial documentation. The attackers reportedly gained access to the systems by leveraging a misconfigured or compromised AWS bucket or similar cloud infrastructure vulnerability although the company later emphasized that funds and securities remained safe.