Hackers Allegedly Leaked 1.59 Million Rows of Indian Insurance User’s Sensitive Data

Hackers allegedly claim that a software company based in India was compromised on December 19, 2024, by a hacker identified as @303. The breach exposed approximately 1,590,798 rows of sensitive data, including customer information and administrative credentials.

The dataset, initially leaked on the dark web forum by a user known as “frog,” contains email addresses from major Indian insurance providers, mobile numbers, and potentially confidential administrative access credentials.

The Sample data analyzed by Cyber Security News contains information about employees of prominent insurance companies, including HDFC Ergo, Bajaj Allianz, ICICI Lombard, and others.

The leaked SQL database file breach includes customer policy information, contact details, and potentially sensitive internal system commands that could further compromise the affected organizations’ security infrastructure.

This incident raises serious questions about the company’s security protocols, especially given their advertised commitment to “protecting data with unwavering diligence.”

The Insurance Regulatory and Development Authority of India (IRDAI) has recently been taking a more proactive stance on cybersecurity following similar incidents.

In March 2025, the regulator instructed all insurers to appoint forensic auditors in advance to ensure a prompt response to cyber incidents. The regulator also directed insurance companies to perform comprehensive IT system audits following recent data leaks.

Cybersecurity experts familiar with the matter suggest the compromised data could be exploited for various malicious activities, including identity theft, targeted phishing campaigns, and unauthorized system access.

According to a recent IBM report, the average cost of a data breach in India reached an all-time high of ₹19.5 crore in 2024, with the insurance sector being particularly vulnerable.

This breach follows several other high-profile incidents in India’s insurance sector, including the Star Health Insurance breach in October 2024 that reportedly affected 31 million customers and a potential data leak at Niva Bupa Health Insurance reported in February 2025.

“This incident demonstrates the ongoing vulnerability of India’s financial services sector to cyberattacks,” said a leading cybersecurity expert, adding that “companies holding sensitive customer data must implement more robust security measures including regular security audits and employee training.”

As investigations continue, this incident highlights the critical need for data protection in India’s quickly changing insurance industry. There has been a 261% rise in cyberattacks in the first quarter of 2024 alone.

We have contacted the relevant software company to request a statement regarding the claim.

Equip your team with real-time threat analysis With ANY.RUN’s interactive cloud sandbox -> Try 14-day Free Trial

The post Hackers Allegedly Leaked 1.59 Million Rows of Indian Insurance User’s Sensitive Data appeared first on Cyber Security News.