Angel One Suffers Data Breach, Says Client Accounts Secure

SUMMARY

In an exchange filing, the company said that it received certain data leakage alerts from its dark-web monitoring partner on February 27, indicating potential compromises to client data

The company said it immediately changed all related credentials of its AWS cloud and other applications to contain the impact of the data breach

Further, it has engaged an external forensic partner to validate and investigate the impact of this incident and conduct a thorough root cause analysis

Listed broking firm Angel One suffered a data leak, which it attributed to unauthorised access to its Amazon Web Services (AWS) resources.

In an exchange filing, the company said that it received certain data leakage alerts from its dark-web monitoring partner on February 27, indicating potential compromises to client data.

“The company received certain data leakage post’ alerts via email from its dark-web monitoring partner on February 27, 2025, informing of unauthorised access of our client’s data. After analysing the post, it was ascertained that some of Angel One’s AWS resources were compromised,” the filing said.

The company said it immediately changed all related credentials of its AWS cloud and other applications to contain the impact of the data breach.

Further, it has engaged an external forensic partner to validate and investigate the impact of this incident and conduct a thorough root cause analysis.

“We have verified that this breach does not have any impact on clients securities, funds and credentials; and all our client accounts remain secure,” the filing added.

Following the disclosure, the company’s shares slumped nearly 5% during the intraday trading on the BSE to INR 2,090.10 on Friday (February 28). However, the stock recovered and pared some of the losses to end the session 1.3% lower at INR 2,167.95.

It is pertinent to note that this is not the first instance of data breach at Angel One. In April 2023, the company suffered a data leak and said that client holding data may have been accessed in an unauthorised manner.

Last year, a report said that the broking firm suffered another leak. However, Angel One rejected the report and said it didn’t see any new breach after April 2023.

The latest development is yet another instance of a data leak at an Indian company. Last year in September, the personal data of millions of customers of Star Health & Allied Insurance was up for sale on the Telegram app.

Last year, the Centre also said that there was a “possible intrusion and data breach” at state-owned telecom company Bharat Sanchar Nigam Ltd (BSNL) in May 2024.