Data breach at CDSL’s KYC arm exposed 4.39 cr investors’ data twice within 10 days: Report

A vulnerability at a CDSL subsidiary, CDSL Ventures Limited (CVL), has exposed personal and financial data of over 4 crore Indian investors twice in a period of 10 days, according to cyber security consultancy startup CyberX9.

The Central Depository Services (India) Limited (CDSL) is a SEBI registered depository and CDSL Ventures Ltd is a KYC registering agency separately registered with the Securities and Exchange Board of India (SEBI).

CDSL said that CVL has taken immediate action and the vulnerability has been mitigated now.

According to CyberX9, it reported the vulnerability on October 19, to CDSL and the securities depository took around 7 days to fix it which could have been resolved immediately.