In a significant data breach, the personal information of approximately 7.9 million customers of Mumbai-based stock broking firm Angel One was exposed online on Tuesday. The leaked data, which appeared on a hacker portal, includes sensitive details such as names, addresses, contact numbers, and even bank account information of the affected individuals. The hacker also claimed access to the customers’ stock holdings and profit and loss statements, as seen in a copy of the data dump reviewed by ET.

A private cybersecurity consultant who examined the data indicated that it appears to be from around 2023, and the hacker has only released a portion of it so far. The consultant suggested that a ransomware demand might have been involved, though the specifics of any interactions between the hackers and the company remain unclear, given that the data dump is over a year old.

On April 21, 2023, Angel One had reported a data breach in a stock exchange filing, acknowledging that certain client profile data and client holding data might have been accessed unauthorizedly. However, the company has not yet confirmed the current claims. Emailed queries to Angel One for comments went unanswered.

The cybersecurity consultant also highlighted that despite the potential age of the data, it remains valuable to spammers and scammers who target active traders, posing significant risks due to the exposure of bank account details.

Angel One, India’s third-largest stock broking company with around 6.5 million active traders, reported a total operational revenue of Rs 1,357 crore and a net profit of Rs 339 crore for FY24.