Mumbai, February 28, 2025 – Angel One Limited (NSE: ANGELONE; BSE: 543235) today disclosed a cybersecurity incident involving unauthorized access to certain client data hosted on Amazon Web Services (AWS). According to the company, immediate remedial actions have been initiated to mitigate the impact, and client funds, securities, and login credentials remain unaffected.
Incident Overview
On February 27, 2025, Angel One Limited received alerts from its dark-web monitoring partner indicating a data leak involving unauthorized access to client information. Following a thorough analysis, the company confirmed that some AWS cloud resources had been compromised.Immediate Remedial Actions
To contain the breach and protect client data, Angel One Limited promptly changed all related AWS cloud credentials and strengthened the security protocols of other associated applications. Additionally, an external forensic expert has been engaged to investigate and validate the extent of the incident, including a comprehensive root-cause analysis.Client Assets Secure; Investigation Ongoing
Angel One Limited has explicitly stated that there has been no compromise of client securities, funds, or credentials, assuring customers that their accounts remain fully secure. The company reiterated its commitment to client data privacy and is conducting a thorough review to determine the full scope and potential impact of the breach.Management Commentary
Naheed Patel, Company Secretary and Compliance Officer, emphasized, "We value the data privacy of our clients and have acted swiftly by engaging external cybersecurity specialists. While client accounts and securities remain secure, we are committed to maintaining transparency and adhering to high governance standards as we complete our investigation."Strategic Outlook & Market Positioning
In response to rising cybersecurity threats, Angel One Limited remains vigilant and proactive, continually enhancing its security infrastructure and governance practices. Investors and clients can expect further updates as the forensic investigation progresses.The company assures stakeholders that it will maintain transparent communication and take all necessary actions to safeguard client interests and data integrity.