Moneycontrol Data Breach

What happened?

In April 2021, hackers posted data for sale originating from the online Indian financial platform, Moneycontrol . The data included 763 thousand unique email addresses (allegedly a subset of a larger 40 million account breach), alongside geographic locations, phone numbers, genders, dates of birth and plain text passwords. The date of the original breach is unclear, although the breached data indicates the file was created in September 2017 and Moneycontrol has stated that the breach is "an old data set".

When did it happen?

The breach date in the public record is September 7, 2017. The record was added to the catalogue on May 22, 2021 and last updated there on May 22, 2021.

What information was reported as exposed?

• Email addresses
• Genders
• Geographic locations
• Passwords
• Phone numbers

These are incident-level categories. The record does not prove that every category was exposed for every affected person.

Who may be affected?

This record may be relevant to people who had an account or other relationship with Moneycontrol or used moneycontrol.com around September 7, 2017. A catalogue entry does not establish that every customer was affected or that every listed data category applied to each person. Compare the record with an official notice addressed to you.

What should you do?

Choose actions that match the information involved. If you find signs that someone is using your identity, the Federal Trade Commission provides a personal recovery plan at IdentityTheft.gov.