HDFC Life Insurance has reported a cyberattack that resulted in the theft of sensitive customer information. The company filed a complaint with the South Region Cyber Police after hackers allegedly accessed private data about their policyholders and asked for money.
The breach took place between November 19 and November 21, 2024. The criminals used an email address and a WhatsApp account to steal personal details from HDFC Life’s customers. The stolen information includes policy numbers, names, addresses, phone numbers, and private health data regarding various illnesses. The attackers sent samples of the stolen data through email and threatened to publish it online if their demands were not met.
The complaint was submitted by HDFC Life’s Associate Vice President (Legal). They stated that the hackers first reached out via email on November 19, giving the company two days to meet their demands. The fraudsters then followed up with a WhatsApp message, increasing their threats.
The South Region Cyber Police have opened a case under specific sections of the BNS Act and IT Act and are now investigating to find the people responsible.
COMPANY STATEMENT
HDFC Life Insurance announced to the stock exchanges that they are aware of a cyberattack and are taking quick action to deal with it. They stated that they received information from an unknown source who maliciously shared some of their customers’ data. The company values customer data privacy and has begun an assessment of their information security and data logs.
They are currently investigating the situation with the help of security experts to find out the cause and determine the necessary actions. HDFC Life is committed to looking into the matter further to understand any potential impact and is making this announcement to ensure good governance. They promise to take care of their customers’ concerns and protect their interests.
