🟠 Parle Agro — NA · HIGH🟠 Nirvasa — 3500 · HIGH🟠 Guidely — 1.5 Million · HIGH🔴 BLS International — 29 Million · CRITICAL🟠 Ashtech Infotech — 25000 · HIGH🟠 Punjab National Bank — 100000 · HIGH🟡 Admatrimony — 500 · MEDIUM🟡 V Love Solar Enterprises — 2000 · MEDIUM🔴 Talentely — 514412 · CRITICAL🟡 C PRO Computer Info-Tech Institute — NA · MEDIUM🟠 Parle Agro — NA · HIGH🟠 Nirvasa — 3500 · HIGH🟠 Guidely — 1.5 Million · HIGH🔴 BLS International — 29 Million · CRITICAL🟠 Ashtech Infotech — 25000 · HIGH🟠 Punjab National Bank — 100000 · HIGH🟡 Admatrimony — 500 · MEDIUM🟡 V Love Solar Enterprises — 2000 · MEDIUM🔴 Talentely — 514412 · CRITICAL🟡 C PRO Computer Info-Tech Institute — NA · MEDIUM
YOUR DATA WAS BREACHED?
What To Do If Your
Data Is Compromised
If your personal data appears in a breach, act fast. Here is a step-by-step guide tailored for Indian citizens.
The faster you respond, the less damage can be done.
⚠️ Do not panic — but do act quickly. Follow the steps below in order. Most can be done in under 30 minutes.
1
Change your passwords immediately
Change the password for the breached service right away. If you used the same password on other accounts — Gmail, banking apps, UPI apps — change those too. Never reuse passwords across multiple services.
→ Use a free password manager like Bitwarden to generate strong, unique passwords for every account. Available on Android, iOS, and PC.
2
Enable Two-Factor Authentication (2FA)
Turn on 2FA on all important accounts — Gmail, banking apps, UPI (PhonePe, GPay, Paytm), social media, and government portals like DigiLocker and UMANG. This means even if someone has your password, they cannot log in without your phone.
→ Use an authenticator app like Google Authenticator or Authy — far more secure than SMS OTPs which can be intercepted.
3
Watch for phishing and fraud attempts
After a breach, scammers use your leaked data to craft convincing fake messages. Be very suspicious of any SMS, WhatsApp message, or email claiming to be from your bank, IRCTC, UIDAI, or any government body asking you to click a link, share an OTP, or verify your account.
→ Remember: No bank, UPI app, or government body will ever ask for your OTP, PIN, or full password over a call, SMS, or email.
4
Monitor your bank accounts and UPI
Check your bank statements and UPI transaction history daily for the next 30 days. Look for any transactions you did not make — even small ones of ₹1–₹10 (fraudsters often test with small amounts first). Enable SMS and email alerts for all transactions.
→ If you see an unauthorized transaction, call your bank immediately and file a dispute. Under RBI rules, you may be entitled to a full refund if reported within 3 days.
5
If Aadhaar data was leaked — lock your biometrics
Lock your Aadhaar biometrics on the UIDAI website or mAadhaar app. This prevents anyone from using your fingerprints or iris scan for authentication without your permission. You can unlock it temporarily when you genuinely need to use it.
→ Go to myaadhaar.uidai.gov.in → Services → Lock/Unlock Biometrics. It takes 2 minutes and is completely free.
6
Report the breach to CERT-In
India's Computer Emergency Response Team (CERT-In) is the government body responsible for handling cybersecurity incidents. You can report data breaches, cyberattacks, and phishing attempts to them. Your report helps protect other Indians by enabling a faster national response.
→ Report at: incident@cert-in.org.in or call 1800-11-4949 (toll free). You can also file at cybercrime.gov.in
7
File a police complaint if you suffer loss
If you suffer financial loss, identity theft, or harassment as a direct result of a breach, file a complaint on the National Cyber Crime Reporting Portal or at your local police station. Keep records of all evidence — screenshots, transaction IDs, messages, and call logs.
→ National Cyber Crime Portal: cybercrime.gov.in | Helpline: 1930 (toll free, 24x7)
8
Protect yourself going forward
Use different email addresses for different types of services. Avoid saving card details on shopping websites. Regularly check haveibeenpwned.com to see if your email has appeared in known international breaches. Be cautious about sharing your Aadhaar and PAN number unnecessarily.
→ The less you share, the smaller your attack surface. Only provide Aadhaar or PAN when legally required — not just because a website asks for it.
Know about a breach we haven't documented?
Submit a tip to help us track and warn other Indians about data incidents.
Submit a Breach Tip →
IndianBreaches