HDBFS Data Breach and Leak (March 2023)
hdbfs.com
About This Breach
HDB Financial Services, a non-bank lending unit of HDFC Bank, reported a data breach at one of its service providers responsible for processing customer information. The breach exposed customer data, although specific details about the breach's extent and the types of data exposed were not immediately disclosed.
Data Exposed
Breach Details
| Breach Type | Data Breach |
| Searchable | Yes |
| Verified | Yes |
| Sensitive Data | No |
| Reference | https://www.cnbctv18.com/technology/hdb-financial-confirms-leak-of-customers-personal-information-in-a-data-breach-16116951.htm (opens in new tab) |
Frequently Asked Questions
How do I check if I was in the HDBFS breach?
Type your email address into the search box on our data breach check page. If it appears in the HDBFS breach, or any other, you'll see the breach name, date and what was exposed. It's free and nothing you type is stored.
When did the HDBFS data breach happen?
HDBFS was breached in Mar 2023. The breach was added to the XposedOrNot index on November 8, 2023.
How many records were exposed in the HDBFS breach?
1,658,762 records were exposed, making it the #333 largest of the 796 breaches in our index.
What data was exposed in the HDBFS breach?
The exposed data includes: Names, Email addresses, Geographic locations, Genders, Phone numbers, Dates of birth.
What should I do if I was affected by the HDBFS breach?
No password was in this breach, so the main risk is phishing. Be wary of emails, calls or texts that quote these details, turn on two-factor authentication, and set up free breach alerts on XposedOrNot so you know the moment your email appears in a new breach.
More Finance Breaches
What Should You Do?
Enable Two-Factor Authentication
Add 2FA on all supported accounts using an authenticator app like Google Authenticator or Authy.
Watch for Phishing Calls & SMS
Be cautious of unexpected calls or texts asking for personal information.
Monitor Your Accounts
Set up login alerts and review account activity regularly for suspicious access.