Have I Been Pwned adds Indian stock broker Angel One: 6.8 million unique email addresses from an April 2023 breach, with bank account numbers, PAN tax IDs and portfolio holdings
Have I Been Pwned (HIBP) added the Angel One breach on 7 October 2026, so people can now check whether their email address is in it.
HIBP says that in July 2024 the Indian stock brokerage confirmed that data leaked online related to a breach in April 2023, and that the leaked data included 7.9 million user records with 6.8 million unique email addresses, along with names, physical addresses, phone numbers, bank account numbers, Permanent Account Numbers (PANs, India's tax ID) and portfolio holdings; HIBP also lists dates of birth.
In its July 2024 statement, reported by The Hindu BusinessLine, Angel One said no new data breach had occurred, that the issue related to an April 2023 incident that was promptly reported to the relevant authorities, and that "this incident has no impact on client securities, funds, or credentials".
It also said the authenticity of the leaked data had not been validated.
UPDATE 22 Oct 2026: added Angel One's own statement and attributed the breach details to Have I Been Pwned (source: The Hindu BusinessLine, 10 Jul 2024).
- Product
- Angel One (Indian stock brokerage) customer records
- Versions
- n/a — incident
- Exploited in Australia?
- unknown
- Patch to
- Check your email address on Have I Been Pwned. If it is listed, be wary of calls or messages that quote your holdings or bank details, confirm any request through Angel One's official app or website, and watch your bank and tax accounts for misuse.