Archive · 28 Sep 2025
Data Breach Exposes Bank Records in India
Imagine a computer server where banks store information about money transfers.
Someone left this server open to the public, like leaving your front door unlocked.
Researchers found that this server had over 270,000 documents showing things like bank account numbers and how much money people were sending.
The data came from at least 38 different banks.
The data was being stored on a server run by Amazon.
While they don't know exactly how it happened, it seems the server was not set up properly, possibly by accident.
The company, Nupay, said only a small amount of data was actually test data.
Eventually, the server was secured, but the information was accessible for a period of time.
A data breach exposed hundreds of thousands of sensitive bank transfer documents in India.
The exposed data included account numbers, transaction figures, and contact details.
The leak originated from an unsecured Amazon-hosted storage server.
The data was linked to at least 38 banks and financial institutions in India.
The source of the leak was addressed, but the exact cause remains unclear.
- Who
- Researchers at UpGuard, Nupay, and various Indian banks.
- What
- A data breach exposed sensitive bank transfer documents.
- When
- Discovered in late August, secured shortly after.
- Where
- India, on an Amazon-hosted server.
- Why
- Unclear; likely due to a configuration error.
- What Happened
- Data breach exposed bank transfer documents.
- Data Exposed
- Account numbers, transaction details, contact details.
- Number of Documents
- Approximately 273,000 PDF documents.
- Banks Involved
- At least 38 banks and financial institutions.
- Source of Leak
- Unsecured Amazon-hosted storage server.
- Affected System
- National Automated Clearing House (NACH).
- Discoverer
- UpGuard cybersecurity firm.