HDFC AMC discloses cybersecurity incident after anonymous threat claim

HDFC Asset Management Company Ltd., one of India’s largest mutual fund managers, disclosed Monday that it experienced a cybersecurity incident involving portions of its IT infrastructure after receiving a communication from an anonymous source claiming access to certain systems.

The company said the incident was identified on May 16, 2026, prompting immediate activation of containment and incident response measures. HDFC AMC also appointed a specialist cybersecurity firm to conduct a detailed forensic assessment and evaluate the potential scope and impact of the breach.

Preliminary findings indicate that the incident is unlikely to materially affect the company’s operations or business continuity. Investor services, fund management activities and other critical functions continue to operate normally, the company said.

HDFC AMC did not disclose the specific nature of the cyber incident, identify which systems may have been affected, or confirm whether any customer or financial data had been compromised. The company also did not provide a timeline for completion of the ongoing forensic review.

The disclosure was made as part of the company’s regulatory compliance and governance obligations. Shares of HDFC AMC opened lower Monday and were trading down 2.3% at Rs 2,645.9 by 9:16 a.m.

The incident comes amid heightened concern over cybersecurity threats facing India’s financial sector and broader corporate ecosystem. The rapid expansion of digital payments and online financial services has increased exposure to cyber risks as transaction volumes continue to rise across the country.