Mumbai: 27-year-old Interior Designer Arrested by South Cyber Team in Ambala in HDFC Life Insurance Data Hack Case.

Mastermind Based in Hong Kong Coordinated the Hack, Said Cyber Police.

About The Case

According to Police, The accused accessed HDFC's server under the pretense of purchasing a policy, obtained an OTP, and shared it with the hacker in Hong Kong. After downloading the data, they collaborated to blackmail HDFC.

The data breach occurred between November and November 21, 2024. Using an email ID (bsdqwasdg@gmail.com) and a WhatsApp account, the cybercriminals managed to steal sensitive personal information of HDFC Life customers. The stolen data included policy numbers, names, addresses, mobile numbers, and sensitive health information related to illnesses. The hackers shared samples of the stolen data via email and threatened to release it online unless their financial demands were met.

Between November 19 and November 21, 2024, an individual using the email address bsdqwasdg@gmail.com and WhatsApp allegedly stole customer data belonging to HDFC Life Insurance Company Ltd. The stolen information reportedly included policy numbers, names, addresses, mobile numbers, and other sensitive details. The perpetrator emailed the stolen data to the company, demanding a ransom and threatening to release or sell the information online if their demands were not met. A cybercrime case has been registered against an unknown person under Sections 308(3) and 351(4) of the BNS Act, and Sections 43(b), 43(i), 43(a), and 66 of the IT Act at the South Cyber Police Station.

According to the police, the complainant, an executive at HDFC Life Insurance Company Ltd., based in Apollo Mills Compound, NM Joshi Marg, Mahalaxmi, stated that the first threatening email was received on November 19 at 4:54 PM on the company’s official email IDs.