Latest / Finance

IncidentFinanceFrontierIndiaConfirmed

Cyberattacks siphon about Rs 300 crore from small Indian NBFCs in two months

See how this story connects

Fraudsters are estimated to have siphoned about Rs 300 crore from non-banking financial companies, mostly smaller ones, through cyberattacks over the past two months or so, according to sources cited by the Economic Times. Nearly 150 complaints or FIRs have been filed, including some 30 in Mumbai, over 25 in Delhi and 15-16 in Chennai. The attacks largely hit NBFCs with turnover of about Rs 1,000 crore or below, exploiting weak cybersecurity infrastructure. Cybersecurity agencies found the Chinese hacking platform CyberStrike behind the cases where probes have been completed.

Why it matters

Cert-In said the time from break-in to damage has shrunk to hours from days, with multiple AI agents operating in parallel, and has asked organisations to prioritise alerts on the Artex and CyberStrike toolkits.

When
29 Oct 2026
ID
WTA-N-2026-0531
Where
India
Who
Cert-In
System
CyberStrike, a Chinese hacking platform (in cases where probes are complete)
Operator
not named
Type
cyberattacks on small non-banking financial companies; about Rs 300 crore estimated taken in two months
Status
nearly 150 complaints or FIRs filed; disclosed by The Economic Times, citing sources; Cert-In · Incident ledger

Summary written with AI by wheresthe.ai, from The Economic Times. Checked against the source on 29 Oct 2026.

Source copy: saved on 29 Oct 2026 to check this story and not republished, because the text belongs to its publisher. Also held by the Internet Archive.

Next stop on this Storyline: What happened nextIndia’s CERT-In names Crafty Falcon group using AI tools against financial firms

Cite this story

WTA-N-2026-0531: “Cyberattacks siphon about Rs 300 crore from small Indian NBFCs in two months.” wheresthe.ai, 29 Oct 2026. https://wheresthe.ai/d/in-cyberattacks-siphon-about-rs-300-crore-from-small-indian-2026-10/ (source: The Economic Times).

Spotted an error? Email [email protected].