Skip to content

Upstox

Disclosed Jan 19, 20224 years ago111,002 accountsUnverified

In April 2021, Indian brokerage firm Upstox suffered a data breach . The incident exposed extensive personal information on over 100k customers including names, genders, dates of birth, physical addresses, banking information and passwords stored as bcrypt hashes. Extensive "know your customer" information was also exposed including scans of bank statements, cheques and identity documents complete with Aadhaar numbers.

What is known

People affected111,002 (accounts in the leaked data, per Have I Been Pwned)
DisclosedJan 19, 2022
HappenedApr 8, 2021
AttackNot stated
Data exposedFinancial, Dates of birth, Emails, Government IDs, Employment, Passwords, Phone numbers, Addresses
SectorTech
StatusUnverified: not yet confirmed by an official notice, a filing or the organization
Check your emailHave I Been Pwned

Sources

Source
Have I Been Pwned: Upstoxhaveibeenpwned.com · Aggregator

Notices filed

WhereFiledPeople
Have I Been Pwnedaccounts in the dataJan 19, 2022111,002
History of this record
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.

Everything about Upstox

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.