Personal data of nearly 8 million Angel One customers leaked online: sources

ET has seen a copy of the data dump.

The hacker claimed to have access to the stock holding of customers and their profit and loss statements, too, and that only part of the data has been released till now.

A private cyber security consultant who has accessed the data said it seems to be from around 2023.

“Typically, in such cases, there is a demand for ransom by the threat actors, but we do not know what exactly transpired between the hackers and the company, since the data dump is a year and a half old,” he said.

"We want to confirm that Angel One's customer data is secure, and there has been no new data leak incident. The current issue pertains to an incident that occurred in April 2023, which was promptly reported to the relevant authorities. We assure you that this incident has no impact on client securities, funds, or credentials, and all client accounts remain secure," said a company spokesperson responding to ET's queries.

On April 21 last year, Angel One had made a stock exchange filing, stating that the company had suffered a data breach.

“We are in the process of verifying the veracity of such claims, which suggest that certain client profile data (like name, email, mobile number); and client holding data may have been accessed in an unauthorised manner,” the firm had said in a BSE filing then.

The security consultant cited earlier said the data could be old, but spammers and scamsters typically access these data points to spam potential trading customers.

“These are very good sources for scamsters to access personally identifiable information about consumers who are trading actively. The data gives out their bank account details, too, which is a major concern,” he said.

Angel One is India’s third-largest stock broking firm with about 6.5 million active traders. The company closed FY24 with a total operational revenue of Rs 1,357 crore and a net profit of Rs 339 crore.