简体中文
繁體中文
English
Pусский
日本語
ภาษาไทย
Tiếng Việt
Bahasa Indonesia
Español
हिन्दी
Filippiiniläinen
Français
Deutsch
Português
Türkçe
한국어
العربية
Abstract:Upstox, a trading app, has notified clients of a security compromise that exposed customer contact information and KYC information.
Trading app Upstox has alerted customers of a security breach that exposed contact data and KYC details of customers. The retail broking firm assured users that their funds and securities remain safe despite the breach. This comes close on the heels of reports of data breaches at organisations like Facebook, LinkedIn, and MobiKwik. “On receipt of e-mails claiming unauthorised access into our database, we have appointed a leading international cyber-security firm to investigate possibilities of breach of some KYC data stored in third-party data warehouse systems. This morning, hackers put up a sample of our data on the dark web,” a company spokesperson said in an e-mailed statement.
The Upstox spokesperson also said that as a proactive measure, the company has initiated multiple security enhancements, particularly at the third-party warehouses, real-time 24×7 monitoring and additional ring-fencing of its network. “As a matter of abundant caution, we have also initiated a secure password reset via OTP for all Upstox users. Upstox takes customer security extremely seriously. Funds and securities of all Upstox customers are protected and remain safe. We have also duly reported this incident to the relevant authorities,” the spokesperson said.
The spokesperson further said that at this point, “We dont know with certainty the number of customers whose data has been exposed.” Upstox, backed by investors like Tiger Global and Ratan Tata, has over three million users. In an announcement note on the company website, Upstox co-founder and CEO Ravi Kumar said funds and securities of customers are protected and remain safe. “Funds can only be moved to your linked bank accounts and your securities are held with the relevant depositories. As a matter of abundant caution, we have also initiated a secure password reset via OTP. Through this time, we have also strongly fortified our systems to the highest standards,” he said. Kumar added that the company has restricted access to the impacted database, and added multiple security enhancements at all third-party data-warehouses.
The company has also ramped up its bug bounty programme to encourage ethical hackers to stress test its systems and protocols and help it identify any vulnerabilities from time to time. The company has urged customers to always use unique strong passwords that are different from older versions and to not share OTPs with anyone. It also urged the customers to beware of online fraud and double-check the legitimacy of links and senders, to watch out for OTPs that they have requested and to alert the service provider in such events.
Disclaimer:
The views in this article only represent the author's personal views, and do not constitute investment advice on this platform. This platform does not guarantee the accuracy, completeness and timeliness of the information in the article, and will not be liable for any loss caused by the use of or reliance on the information in the article.
In the midst of financial innovation and regulation, WikiGlobal, the organizer of WikiEXPO, stays abreast of industry trends and conducts a series of insightful and distinctive interviews on pivotal topics. We are delighted to have the privilege of inviting Simone Martin for an in-depth conversation this time.
Discover how MultiBank Group, a global leader in financial derivatives, secured three prestigious awards at Traders Fair Hong Kong 2024, highlighting its innovative trading solutions and industry excellence.
Discover how CySEC resolved compliance issues with Charlgate Ltd, the operator of Fxview, through a €50,000 settlement. Explore the investigation, regulatory measures, and CySEC's new website designed for improved accessibility and transparency.
Discover TradingView's DEX Screener, a powerful tool for analyzing decentralized exchange trading pairs. Access metrics like liquidity, trading volume, and FDV to make smarter, data-driven trading decisions.