India desk

Cyber threats hitting India

Breaches at Indian companies, fraud and scam waves, CERT-In advisories and the policy that shapes them — sourced from filings, regulators and police.

Severity: High · India · Threats

In this section

Deepfake investment ads in India: what they are, who has been faked, and how to spot one

Read report
Severity: Medium · India · Policy

Data breach reporting in India: CERT-In's six-hour rule and the DPDP timeline explained

Read report
Severity: High · India · Threats

Mule accounts: why renting out your bank account can end in arrest

Read report
Severity: High · India · Threats

Fake job offers, real compounds: how Indians end up trafficked into Southeast Asian scam hubs

Read report
Severity: High · India · Law enforcement

CBI's Operation Chakra-VI targets the money trail behind India's digital arrest scams

Read report
Severity: High · India · Threats

Digital arrest scams in India: complaints fall, but the Supreme Court and CBI keep up pressure

Read report
Severity: Medium · India · Policy

SIM binding, IMEI crackdown and Sanchar Saathi: where India's telecom anti-fraud rules stand

Read report
Severity: Medium · India · Policy

Indian cybercrime by the numbers: what NCRP, 1930 and the RBI's 2025-26 report actually show

Read report
Severity: High · India · Data theft

Tata Electronics confirms cyber incident after group leaks alleged Apple and Tesla files

Read report
Severity: High · India · Incident

Bank of Baroda discloses cyber incident as data-leak claims circulate

Read report
Severity: High · India · Incident

Bajaj Auto says ransomware attack led it to pause operations for a few days

Read report
Severity: High · India · Data theft

Reliance confirms partial breach as Kudankulam project files leak; NPCIL says no safety data

Read report

India / by the numbers

India's cybercrime, in numbers

22,495 cr

lost to cyber fraud reported on NCRP (₹ crore, 2025)

ThePrint — MHA data: Indians lost Rs 22,495 crore to cyber fraud in 2025 (21 Feb 2026)

11,158 cr

saved via I4C's CFCFRMS across 32.80 lakh complaints (₹ crore, 2021 to 30 Jun 2026)

MHA — Lok Sabha Unstarred Question No. 251, National Cyber Crime Data (21 Jul 2026)

29.44 lakh

cyber security incidents handled by CERT-In (2025)

PIB — CERT-In: India's Frontline Defender against Cyber Threats (23 Jan 2026)

10,114

bank and FI fraud cases of ₹1 lakh+ reported, involving ₹48,021 crore (RBI, FY2025-26)

Outlook Business (PTI) — RBI Annual Report 2025-26 fraud data (29 May 2026)

Tracker

Recent Indian data breaches

Full India tracker
DisclosedOrganisationSectorCountryRecordsCause / actorStatus
Dodo PaymentsBengaluru payments firm said attackers used a Metabase flaw to reach an internal analytics system holding some merchant data; a dark-web listing claims more.Read our reportFinanceIndiaUnknownVulnerabilityConfirmed
Bank of BarodaBank disclosed a cyber incident linked to a possible business email compromise after an anonymous claim of data access; ~1TB leak claims are unverified.Read our reportFinanceIndiaUnknownSocial engineeringConfirmed
Reliance Infrastructure (Kudankulam project data)Reliance confirmed a 'partial breach' of a Yotta-hosted server after files tied to Kudankulam nuclear plant work appeared on a leak site.Read our reportOtherIndiaUnknownData theftWorld LeaksConfirmed
UMANG (MeitY government services app)Researchers found flaws exposing EPFO UANs, LPG bookings and plaintext Aadhaar numbers via linked services; MeitY said data in affected APIs is now encrypted.Read our reportGovernmentIndiaUnknownVulnerabilityConfirmed
National Testing Agency (CUET-UG 2026 candidate data)MediaNama found about 15.5 lakh CUET-UG 2026 candidate records offered for sale; NTA says it shares data only via DigiLocker and authorised APIs. Origin unclear.Read our reportEducationIndia1.6M (seller's claim)UnknownClaimed
IDRBT (.bank.in domain registry)Unauthenticated APIs in the RBI-mandated .bank.in registrar exposed data on 5,576 bank staff for 13+ months; CERT-In said the issue was fixed.Read our reportFinanceIndia5.6KVulnerabilityConfirmed
Bajaj AutoAutomaker told stock exchanges ransomware hit its systems and tech subsidiary; operations continued and it did not say if data was taken.Read our reportManufacturingIndiaUnknownRansomwareConfirmed
Tata ElectronicsApple and Tesla supplier confirmed a cyber incident after ~630GB (204,000+ files) of alleged company data was posted online.Read our reportManufacturingIndiaUnknownData theftWorld LeaksConfirmed

Lost money

Call 1930 or file at cybercrime.gov.in — the faster, the better the odds of freezing it.

Suspicious call or SMS

Report it on Sanchar Saathi – Chakshu.

Organisations

Report incidents to CERT-In within six hours. How it works.

Advisories

Read CERT-In advisories and exploited vulnerabilities.