Upstox data breach

The Upstox breach happened on April 8, 2021 and exposed 111,002 accounts. 13 kinds of data were exposed.

Overview

Site

upstox.com

Breach date

April 8, 2021

Recorded on

January 19, 2022

Accounts exposed

111,002

Exposed data

Bank account numbers, Dates of birth, Email addresses, Family members' names, Genders, Government issued IDs, Income levels, Marital statuses, Nationalities, Occupations, Passwords, Phone numbers, Physical addresses

Risk score

95 out of 100

Risk based on the exposed data

This breach scores 95 out of 100. The score is driven mostly by Passwords, Bank account numbers, Government issued IDs.

Breaches from the same period

• LinkedIn Scraped Data (2021) (2021-04-08, 125,698,496 accounts)
• Phone House España (2021-04-08, 5,223,350 accounts)
• SlideTeam (2021-04-06, 1,464,271 accounts)

What affected users should do

• Change your Upstox password, and also change it on any other service where you used the same password. You can create a new one with the password generator.
• Turn on two-factor authentication for your login.
• Phone numbers were exposed, so watch out for impersonation by text message or phone call.
• Card or bank details were exposed, so check your statements and contact your card issuer or bank about any charges you do not recognize.
• ID numbers were exposed, so watch out for contracts signed in your name.

Create a new password →