India’s securities depository CDSL says malware compromised its network

The systems of India's leading central securities depository have been compromised.

In a filing with India's National Stock Exchange, the securities depository said that it detected a few of its internal machines being affected by malicious software.

The company immediately isolated the machines and disconnected itself from other parts of the capital market.

There is no reason to believe that any confidential information or investor data has been compromised by the incident, according to the company.

CDSL doesn't know the exact details of the software. The company's website was down. The company wouldn't say if they are related.

CDSL refused to answer our other questions, including if the company stores logs that would allow it to determine what, if any, data was exfiltration from its network. The spokesman said that they are working toward resolutions.

CDSL maintains and service nearly 75 million trader accounts for investors across the country. The company has Bombay Stock Exchange as one of its significant shareholders.

CDSL is India's only publicly listed and the country's second largest depository after NDSL. CDSL allows the holding of securities and their transactions in electronic form.

The CDSL team has reported the incident to the relevant authorities and is working with its cyber security advisors to analyze the impact.

Sensitive data of Indian pension fund holders exposed online