What was exposed, when it happened, and which databases confirm it.
- accounts
- 174,444
- Breached
- April 8, 2021
- Last Update
- January 19, 2022
Were you caught in this breach?
Search your email, phone number or username against every record CheckLeaked indexes.
Your address never leaves this page: it is hashed in your browser and only a short fragment of that hash is sent.
What happened
In April 2021, Indian brokerage firm Upstox suffered a data breach. The incident exposed extensive personal information on over 100k customers including names, genders, dates of birth, physical addresses, banking information and passwords stored as bcrypt hashes. Extensive "know your customer" information was also exposed including scans of bank statements, cheques and identity documents complete with Aadhaar numbers. The data was provided to HIBP by a source who requested it be attributed to "[email protected]".
Compromised Info
- Bank account numbers
- Dates of birth
- Email addresses
- Family members' names
- Genders
- Government issued IDs
- Income levels
- Marital statuses
- Nationalities
- Occupations
- Passwords
- Phone numbers
- Physical addresses
Attestation
Four independent databases catalog this breach and they do not always agree. Each lane below is one source’s own count.
Sources & Link Methods
- LeakCheck— linked via automatic string matching
- HIBP
FAQ
What was leaked in the Upstox breach?
The Upstox breach exposed: Bank account numbers, Dates of birth, Email addresses, Family members' names, Genders, Government issued IDs, Income levels, Marital statuses, Nationalities, Occupations, Passwords, Phone numbers, and Physical addresses.
When did the Upstox breach happen?
The Upstox breach was disclosed on April 8, 2021 and affected 174,444 records.
Am I affected by the Upstox breach?
Search your email, phone or username at checkleaked.cc to find out whether your data appears in the Upstox leak.