Angel One data breach exposes 6,765,054 accounts
Angel One
Indian brokerage Angel One confirmed a breach that occurred in April 2023, leaking over 6.8 million unique email addresses and detailed personal and financial information. The data release included bank account numbers, PAN IDs and portfolio holdings, though the firm said client funds were unaffected.
why this severityConfirmed breach exposing personal and financial data of over 6.7 million accounts
- first report
- 7 Oct 2026
- last update
- 7 Oct 2026
What to do
Investigate the breach, notify affected users, and improve security controls
Timeline · 1
Sources · 1
News and write-ups
- 2026-10-07Angel One data breach exposes 6,765,054 accountsHave I Been Pwned · haveibeenpwned.com/Breach/AngelOne
Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.
Classification
- AI role
- No AI role
- categories
- General security
- severity
- 4 · Confirmed real-world loss
- targets
- Not applicable
- owasp llm top 10
- no entry for these categories
- mitre atlas
- no technique for these categories
- dates
- happened 1 Apr 2023 · first reported 7 Oct 2026
- origin
- News & research feeds
- record
- confidence 0.95 · created 2026-10-26 14:52Z · updated 2026-10-30 03:33Z
Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned
Copy a brief
This record as a short Markdown brief, for a ticket, a chat or a coding agent.
the brief as text
# Angel One data breach exposes 6,765,054 accounts https://gcdradar.vercel.app/incidents/angel-one-data-breach-exposes-6-765-054-accounts · AIR-2026-1520 · closed 2026-10-21 - Lane: Breaches & attacks - Severity: 4 (Confirmed real-world loss): Confirmed breach exposing personal and financial data of over 6.7 million accounts - Fix status: No fix needed - First reported: 2026-10-07 (happened 2023-04-01) - AI role: No AI role - Products: Angel One ## Summary Indian brokerage Angel One confirmed a breach that occurred in April 2023, leaking over 6.8 million unique email addresses and detailed personal and financial information. The data release included bank account numbers, PAN IDs and portfolio holdings, though the firm said client funds were unaffected. ## What to do Investigate the breach, notify affected users, and improve security controls ## Latest updates - 2026-10-07: Angel One data breach exposes 6,765,054 accounts (https://haveibeenpwned.com/Breach/AngelOne) ## Sources - 2026-10-07 Have I Been Pwned: Angel One data breach exposes 6,765,054 accounts https://haveibeenpwned.com/Breach/AngelOne Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.
Related
- live7.5SonicOS SSLVPN CVE-2026-19868: SonicWall SonicOS SSLVPN MFA Bypass
Patch now · Exploited · Patched · since 6 Nov 2026 · updated 9 Nov 2026 · CVE-2026-19868
- liveGitHub repositories Fake security tools on GitHub push backdoors and infostealers
Supply chain · Exploited · No fix needed · since 6 Nov 2026
- liveQNAP NAS QNAP warns of Plex2Shell attacks exploiting Plex Media Server on NAS devices
Patch now · Exploited · No patch yet · since 6 Nov 2026 · updated 9 Nov 2026
- liveFBI Agent Pleads Guilty to Stealing Cryptocurrency from Hackers
Breaches & attacks · Real loss · since 6 Nov 2026 · updated 9 Nov 2026
- liveMicrosoft Paint CVE-2026-83844: Microsoft Paint RCE Flaw Fixed via Microsoft Store
Patch now · Disclosed · Patched · since 6 Nov 2026 · updated 9 Nov 2026 · CVE-2026-83844
- liveRefrigeration system controllers US Agencies Warn Threat Actors Target Commercial Refrigeration Systems
Breaches & attacks · Exploited · since 6 Nov 2026 · updated 9 Nov 2026