Angel One, a major Indian stock brokerage firm, experienced a data breach when its Amazon Web Services account was compromised. The breach was detected following an alert from a 'dark web monitoring partner' about a possible data leak. The firm acted quickly to change passwords for AWS and other applications and initiated an investigation into the breach's origin and scope. Angel One confirmed that the breach did not affect clients' securities, funds, or credentials, ensuring that all client accounts remained secure. The incident raises concerns about potential cybersecurity lapses at Angel One, rather than AWS system vulnerabilities.
Source: https://www.scworld.com/brief/angel-one-breach-compromises-client-data
TPRM report: https://scoringcyber.rankiteo.com/company/angel-one-fund
"id": "ang702030425",
"linkid": "angel-one-fund",
"type": "Breach",
"date": "3/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'Financial Services',
'location': 'India',
'name': 'Angel One',
'type': 'Stock Brokerage Firm'}],
'attack_vector': 'Compromised AWS Account',
'customer_advisories': 'Ensuring that all client accounts remained secure',
'description': 'Angel One, a major Indian stock brokerage firm, experienced a '
'data breach when its Amazon Web Services account was '
'compromised. The breach was detected following an alert from '
"a 'dark web monitoring partner' about a possible data leak. "
'The firm acted quickly to change passwords for AWS and other '
"applications and initiated an investigation into the breach's "
'origin and scope. Angel One confirmed that the breach did not '
"affect clients' securities, funds, or credentials, ensuring "
'that all client accounts remained secure. The incident raises '
'concerns about potential cybersecurity lapses at Angel One, '
'rather than AWS system vulnerabilities.',
'impact': {'brand_reputation_impact': 'Potential cybersecurity lapses',
'systems_affected': 'AWS Account'},
'investigation_status': "Initiated an investigation into the breach's origin "
'and scope',
'response': {'communication_strategy': "Confirmed that clients' securities, "
'funds, or credentials were not '
'affected',
'containment_measures': 'Changed passwords for AWS and other '
'applications'},
'title': 'Angel One AWS Account Compromise',
'type': 'Data Breach'}