In short
- Angel One, a large Indian stock brokerage, had customer data stolen in April 2023; the dataset surfaced online in July 2024.
- Have I Been Pwned loaded it on October 7, 2026: 6,765,054 email addresses, plus bank account numbers, PANs and dates of birth.
- Angel One says client securities, funds and credentials were not affected; no passwords are listed.
- US and Latin American businesses are unlikely to be in it unless staff trade through Angel One.
This is not a new breach, but it is newly searchable. In April 2023, Angel One, one of India’s largest stock brokerages, had customer data stolen; it reported the incident to the authorities at the time. In July 2024 a dataset of about 7.9 million customer records surfaced online, and Angel One said it came from that same 2023 incident: “there has been no new data leak incident” and it “has no impact on client securities, funds, or credentials.” On October 7, 2026, Have I Been Pwned loaded the dataset, with 6,765,054 unique email addresses, so anyone can now check whether their address is in it. Angel One separately reported unauthorized access to its cloud resources in February 2025; that is a different incident and not this dataset. The listing is on our Angel One data breach page.
What was exposed
The breach catalogue lists names, email addresses, phone numbers, physical addresses, dates of birth, bank account numbers, government ID numbers (India’s Permanent Account Numbers, or PANs) and financial investment details. Media reports at the time confirmed names, addresses, phone numbers and email addresses. The investment and profit-and-loss data rests mainly on the attacker’s claims, and Angel One has not confirmed it. The catalogue lists no passwords, which matches Angel One’s statement that credentials were not affected.
This mix is useful for fraud. Contact details make phishing look personal. A bank account number plus a government ID and a date of birth are the answers many institutions use to check identity on the phone. And a scammer who appears to know what someone invests in can pose as a broker or a tax official far more convincingly.
Does this touch your business?
Angel One serves the Indian market. If your business is in the United States or Latin America and nobody on your team trades through Angel One, you are very unlikely to be in this dataset.
If you have staff or partners in India who invest through it, the risk is personal fraud aimed at them, and it can spill over to work: a call that opens with someone’s real investment details builds the trust a scammer then uses to ask for company information or a payment.
What to do this week
- Check the addresses that matter. Run personal and work addresses through our free Am I Breached? checker, which uses the same Have I Been Pwned data, and turn on alerts for the next breach.
- If you are in it, expect targeted calls. Treat any contact that mentions your bank account, PAN or investments as suspicious until you have called the institution back on its official number.
- Keep payment changes on a call-back rule. Whatever this breach touches, your business should confirm any change to bank details or any urgent transfer by calling a number already on file.
Frequently asked questions
Is the Angel One breach new?
No. The data comes from an April 2023 incident that Angel One reported at the time. What is new is that it is now searchable in Have I Been Pwned.
Were passwords exposed?
No passwords are listed, and Angel One said credentials were not affected. Bank account numbers, PANs and dates of birth are listed, which are useful for identity fraud.
How do I know if my email is in the Angel One data?
Enter it in our free Am I Breached? checker, which uses the Have I Been Pwned data, and turn on alerts.
Is this the same as the 2025 Angel One incident?
No. In February 2025 Angel One reported unauthorized access to its cloud resources. That is a separate incident and not this dataset.
Data from Have I Been Pwned | Sources: teiss, Entrepreneur India, Inc42 (2025 incident) | Written with AI assistance and checked against these sources on October 12, 2026