gcdRadar
closedclosed 21 Oct 2026Breaches & attacks4 Confirmed real-world loss

Angel One data breach exposes 6,765,054 accounts

Angel One

Indian brokerage Angel One confirmed a breach that occurred in April 2023, leaking over 6.8 million unique email addresses and detailed personal and financial information. The data release included bank account numbers, PAN IDs and portfolio holdings, though the firm said client funds were unaffected.

why this severityConfirmed breach exposing personal and financial data of over 6.7 million accounts

first report
7 Oct 2026
last update
7 Oct 2026

What to do

Investigate the breach, notify affected users, and improve security controls

Timeline · 1

  1. 7 Oct 2026Angel One data breach exposes 6,765,054 accounts

Sources · 1

News and write-ups

  1. 2026-10-07
    Angel One data breach exposes 6,765,054 accounts
    Have I Been Pwned · haveibeenpwned.com/Breach/AngelOne

Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.

Classification

AI role
No AI role
categories
General security
severity
4 · Confirmed real-world loss
targets
Not applicable
owasp llm top 10
no entry for these categories
mitre atlas
no technique for these categories
dates
happened 1 Apr 2023 · first reported 7 Oct 2026
origin
News & research feeds
record
confidence 0.95 · created 2026-10-26 14:52Z · updated 2026-10-30 03:33Z

Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned

Copy a brief

This record as a short Markdown brief, for a ticket, a chat or a coding agent.

the brief as text
# Angel One data breach exposes 6,765,054 accounts

https://gcdradar.vercel.app/incidents/angel-one-data-breach-exposes-6-765-054-accounts · AIR-2026-1520 · closed 2026-10-21

- Lane: Breaches & attacks
- Severity: 4 (Confirmed real-world loss): Confirmed breach exposing personal and financial data of over 6.7 million accounts
- Fix status: No fix needed
- First reported: 2026-10-07 (happened 2023-04-01)
- AI role: No AI role
- Products: Angel One

## Summary

Indian brokerage Angel One confirmed a breach that occurred in April 2023, leaking over 6.8 million unique email addresses and detailed personal and financial information. The data release included bank account numbers, PAN IDs and portfolio holdings, though the firm said client funds were unaffected.

## What to do

Investigate the breach, notify affected users, and improve security controls

## Latest updates

- 2026-10-07: Angel One data breach exposes 6,765,054 accounts (https://haveibeenpwned.com/Breach/AngelOne)

## Sources

- 2026-10-07 Have I Been Pwned: Angel One data breach exposes 6,765,054 accounts https://haveibeenpwned.com/Breach/AngelOne

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.

Related

  1. live7.5
    SonicOS SSLVPN CVE-2026-19868: SonicWall SonicOS SSLVPN MFA Bypass

    Patch now · Exploited · Patched · since 6 Nov 2026 · updated 9 Nov 2026 · CVE-2026-19868

  2. live
    GitHub repositories Fake security tools on GitHub push backdoors and infostealers

    Supply chain · Exploited · No fix needed · since 6 Nov 2026

  3. live
    QNAP NAS QNAP warns of Plex2Shell attacks exploiting Plex Media Server on NAS devices

    Patch now · Exploited · No patch yet · since 6 Nov 2026 · updated 9 Nov 2026

  4. live
    FBI Agent Pleads Guilty to Stealing Cryptocurrency from Hackers

    Breaches & attacks · Real loss · since 6 Nov 2026 · updated 9 Nov 2026

  5. live
    Microsoft Paint CVE-2026-83844: Microsoft Paint RCE Flaw Fixed via Microsoft Store

    Patch now · Disclosed · Patched · since 6 Nov 2026 · updated 9 Nov 2026 · CVE-2026-83844

  6. live
    Refrigeration system controllers US Agencies Warn Threat Actors Target Commercial Refrigeration Systems

    Breaches & attacks · Exploited · since 6 Nov 2026 · updated 9 Nov 2026