Hackers stole confidential data from Indian stock broker Angel One's AWS resources

Indian stock broker Angel One said it suffered a serious data security incident that resulted from unauthorised access to data stored in its Amazon Web Services cloud storage. 

 

Headquartered in Mumbai, India, Angel One is a stockbroker and wealth management company that offers online trading and investment services.

 

In a corporate filing with the Bombay Stock exchange (BSE), Angel One said that on February 27, its dark-web monitoring partner notified it about certain posts on the dark web that leaked its confidential information. The company immediately launched an investigation and hired external cyber security experts to determine the scope of the incident.

 

“The Company received certain data leakage post’ alerts via email from its dark-web monitoring partner on February 27, 2025, informing of unauthorised access of our clients’ data. After analysing the post, it was ascertained that some of Angel One’s AWS resources were compromised,” the filing reads.

 

To contain the impact of the incident, the stockbroker promptly changed all “related credentials of its AWS cloud and other applications.”

 

The company has, however, confirmed that the security incident did not impact any of its clients securities, funds or credentials and all its client accounts are secure.

 

“We value the data privacy of our clients and as an immediate measure, we have engaged an external forensic partner to validate and investigate the impact of this incident and its thorough root cause analysis.

 

“We continue to investigate this further to assess its potential impact, if any, and are making this disclosure as a matter of good governance,” Angel One added.

 

The company is yet to share details on who is responsible for the data security incident or how the threat actor compromised its AWS resources.

 

Last week, Niva Bupa Health Insurance, one of India’s largest insurance providers, announced that it experienced a data security incident after receiving an anonymous claim of unauthorised access to its customer information.