In a major breach of user data, around 7.9 million personally identifiable information (PII) data belonging to the customers of Mumbai-based stock broking firm Angel One, was released in an online hacker portal on Tuesday.

Details like names, addresses, contact numbers and even bank account details of the impacted individuals have been put up on the public portal. The hacker claimed that he got access to the stock holding of the impacted customers and their profit and loss statements too. ET has seen a copy of the data dump.

A private cyber security consultant who has accessed the data said that it seems to be from around 2023 and the hacker has claimed that he has only released part of the data as of now.

“Typically, in such cases, there is a ransomware demand,nd but we do not know what exactly transpired between the hackers and the company since the data dump is a year and a half old,” he said.

On April 21, 2023, Angel One had made a stock exchange filing stating that the company had suffered a data breach.

“We are in the process of verifying the veracity of such claims, which suggest that certain client profile data (like name, email, mobile number); and client holding data may have been accessed in an unauthorized manner,” the firm had said in a BSE filing then.

Emailed queries to the stockbroker for comments went unanswered.

The security consultant quoted above also said that the data could be dated, but spammers and scamsters typically access these data points to spam potential trading customers.

“These are very good sources for scamsters to access personally identifiable information about consumers who are trading actively. The data gives out their bank account details too, which is a major concern,” he said.

Angel One is the third-largest stock broking company in the country with around 6.5 million active traders. The company closed FY24 with a total operational revenue of Rs 1,357 crore and a net profit of Rs 339 crore.