← Back to timeline

Upstox

SourceHave I Been Pwned
StatusConfirmed breach
AddedJanuary 19, 2022
OccurredApril 8, 2021
Accounts affected111,002
Domainupstox.com
All Upstox breaches →
What was exposed
Bank account numbersDates of birthEmail addressesFamily members' namesGendersGovernment issued IDsIncome levelsMarital statusesNationalitiesOccupationsPasswordsPhone numbersPhysical addresses
What to do if you were affected
Worried your data is exposed?Take back control of your personal data with Literal.
Protect your data
Details
In April 2021, Indian brokerage firm Upstox suffered a data breach . The incident exposed extensive personal information on over 100k customers including names, genders, dates of birth, physical addresses, banking information and passwords stored as bcrypt hashes. Extensive "know your customer" information was also exposed including scans of bank statements, cheques and identity documents complete with Aadhaar numbers.
Frequently asked questions

What is the Upstox data breach?

In April 2021, Indian brokerage firm Upstox suffered a data breach . The incident exposed extensive personal information on over 100k customers including names, genders, dates of birth, physical addresses, banking information and passwords stored as bcrypt...

When did the data breach happen?

This data breach occurred around April 2021.

How many accounts were affected?

Around 111,002 accounts were affected.

What information was exposed?

Exposed data included Bank account numbers, Dates of birth, Email addresses, Family members' names, Genders, Government issued IDs, Income levels and Marital statuses.

What should I do if I was affected?

Change your password for this account, and anywhere you reused it. Turn on two-factor authentication. Watch your card and bank statements for unfamiliar charges, and consider requesting a new card number. Place a fraud alert or credit freeze with the major credit bureaus to block new accounts opened in your name. Expect more phishing and spam at this address. Treat messages that reference this company with extra caution. Watch for text-message phishing and SIM-swap attempts on your phone number. Be wary of targeted scams that use your personal details to sound convincing.

View the original record on Have I Been Pwned ↗
Related breaches