Data breach
Upstoxupstox.com
111 002 accounts exposed in a breach dated 2021-04-08.
Breached2021-04-08Added to HIBP2022-01-19 UTCUpdated by HIBP2022-01-19 UTCAccounts111 002Domainupstox.com
Verified
What happened in Have I Been Pwned’s words
In April 2021, Indian brokerage firm Upstox suffered a data breach. The incident exposed extensive personal information on over 100k customers including names, genders, dates of birth, physical addresses, banking information and passwords stored as bcrypt hashes. Extensive "know your customer" information was also exposed including scans of bank statements, cheques and identity documents complete with Aadhaar numbers.
Exposed data as HIBP classifies it
- Bank account numbers
- Dates of birth
- Email addresses
- Family members' names
- Genders
- Government issued IDs
- Income levels
- Marital statuses
- Nationalities
- Occupations
- Passwords
- Phone numbers
- Physical addresses
How HIBP qualifies it
- HIBP verified that the data came from this service.
Source: Have I Been Pwned (CC BY 4.0)
Copied from HIBP 2026-11-05 03:50 UTC