cyber.hendryadrian.com
Cyber Attack & Data Breach · lawtrend.in

Bombay High Court Orders Blocking Over Alleged HDFC AMC Data Theft

· Original article ↗

Summary

The Bombay High Court ordered Indian authorities to block platforms linked to data allegedly stolen from HDFC AMC by the unidentified Morpheus group. The article says the company reported the incident to SEBI and activated emergency measures.

Key points

  • The article reports that HDFC AMC discovered anomalies and an extortion email on May 16; the email allegedly claimed that Morpheus had taken more than 680 GB of data.
  • The allegedly affected data includes investor names, addresses, identity documents, PAN details, bank account numbers and investment records.
  • HDFC AMC reportedly activated emergency response measures and reported the incident to SEBI.
  • On May 29, the Bombay High Court issued interim relief restraining Morpheus from using, distributing or disclosing the data.
  • The court directed DoT and MeitY to take steps to remove or block platforms associated with the data; a follow-up hearing was scheduled for June 16.

Article Details

Victim Organization
HDFC Asset Management Company (HDFC AMC)
Incident Type
Alleged ransomware-related data theft and extortion threat involving exfiltration and threatened disclosure of data
Data Types Exposed
  • Names
  • Residential addresses
  • Identity documents
  • PAN details
  • Bank account numbers
  • Investment records
Affected Records
Not disclosed; the article says the data could affect millions of investors but gives no record count.
Affected Data Size
More than 680 GB, allegedly exfiltrated
Operational Impact
HDFC AMC activated emergency protocols to contain the incident and reported it to SEBI. The Bombay High Court ordered measures to block platforms associated with the allegedly stolen data. No service disruption is reported.
Ransom Or Extortion
HDFC AMC reportedly received an extortion email from the group claiming it had breached the network and exfiltrated the data. The article reports a threat to publish or trade the data but does not state that a ransom demand was made or paid.
Claim Status
alleged

People

Shreeram ShirsatBombay High Court Justice who issued the interim injunction addressing the alleged theft and threatened disclosure of HDFC AMC data.

Threat Actors

MorpheusAn unidentified group calling itself “Morpheus” allegedly claimed in an extortion email that it breached HDFC AMC’s network and exfiltrated more than 680 GB of data; the article reports a threat to publish or trade the data.

Countries

IndiaAs a primary custodian of public investments across India, HDFC AMC manages the assets of millions of mutual fund unit holders.

Industries

Asset managementThe Bombay High Court has issued a temporary injunction to stop the unidentified “Morpheus” group from leaking or trading more than 680 GB of data allegedly stolen from HDFC Asset Management Company.