Archive · 29 Aug 2026
Hackers Allegedly Hijack Firm’s GST Account, Generate ₹183 Crore Invoices
A plywood and hardware company in Hyderabad says someone broke into its online GST account.
The alleged attackers changed the phone number and email address linked to the account.
The company’s accountant noticed the problem on August 3 because the usual login no longer worked.
The attackers allegedly created 730 fake invoices and e-way bills.
These documents represented transactions worth about ₹183.61 crore.
The company says the activity may have been intended to help other businesses claim input tax credits improperly.
Officials identified 72 firms connected to the invoices.
Tax authorities restored access, and the Telangana Cyber Security Bureau is investigating the case.
Unknown persons allegedly changed the firm’s GST-registered mobile number and email ID on July 23.
The accountant discovered the breach on August 3 after being unable to access the GST portal.
Authorities found 730 fake invoices and unauthorised e-way bills worth ₹183.61 crore.
The invoices involved 72 firms and were allegedly created to facilitate illicit input tax credit.
The Telangana Cyber Security Bureau registered a case citing cheating, impersonation, unauthorised access and computer-related offences.
- Who
- A Hyderabad-based plywood and hardware firm, unidentified persons, tax officials and the Telangana Cyber Security Bureau.
- What
- The firm’s GST account was allegedly compromised, resulting in changed credentials and 730 fake invoices and unauthorised e-way bills worth ₹183.61 crore.
- When
- The registered details were allegedly changed on July 23; the breach was noticed on August 3, and the activity was examined on August 6.
- Where
- The firm is based in Hyderabad, and officials handled the complaint at the GST office in Nampally, Telangana.
- Why
- The alleged invoices were created to facilitate illicit input tax credit and cause losses to government revenue.
- Alleged transaction value
- ₹1,83,61,99,409.21, or about ₹183.61 crore
- Fake invoices
- 730
- Firms identified
- 72
- Account changes
- The registered mobile number, email ID and password were allegedly changed without authorisation.
- Discovery date
- August 3
- Investigating agency
- Telangana Cyber Security Bureau (TGCSB)
- Alleged offences
- Cheating, impersonation, unauthorised access and computer-related offences under the Bharatiya Nyaya Sanhita and Information Technology Act