Incident
Published 2026-10-07
Verified 2026-10-07

Have I Been Pwned adds Indian stock broker Angel One: 6.8 million unique email addresses from an April 2023 breach, with bank account numbers, PAN tax IDs and portfolio holdings

Have I Been Pwned (HIBP) loaded the Angel One breach on 7 October 2026, so people can now check whether their email address is in it. Angel One, an Indian stock brokerage, confirmed in July 2024 that data from a breach in April 2023 had leaked online. HIBP says the leaked set holds 7.9 million user records with 6.8 million unique email addresses, plus names, physical addresses, phone numbers, dates of birth, bank account numbers, Permanent Account Numbers (PANs, India's tax ID) and portfolio holdings. Angel One said at the time that the breach did not affect client securities, funds or login credentials. The data is old, but bank details, tax IDs and holdings make convincing material for investment scams and impersonation. Primary: Have I Been Pwned breach entry.

Product
Angel One (Indian stock brokerage) customer records
Versions
n/a — incident
Exploited in Australia?
unknown
Patch to
Check your email address on Have I Been Pwned. If it is listed, be wary of calls or messages that quote your holdings or bank details, confirm any request through Angel One's official app or website, and watch your bank and tax accounts for misuse.

Primary: Have I Been Pwned — Angel One breach (added 7 Oct 2026; breach April 2023)

breaches