Email Accounts of 11 SEBI Officials Hacked, FIR Filed
Moneylife Digital Team 18 July 2022
The Securities and Exchange Board of India (SEBI) has complained about a cyber security incident on its email system. However, the capital markets regulator added that no sensitive data was stolen. SEBI has filed a first information report (FIR) against unknown persons.
The market regulator said in a statement that recently, a cyber security incident has been noticed on SEBI’s email system, which was undergoing a system upgrade. 
Varunkumar Kishan Gopal, an assistant manager with information technology (IT) department of SEBI’s head office in Bandra-Kurla Complex (BKC), received a complaint from ISD manager Abhijit Chandrakant on 23 May 2022. Mr Chandrakant suspected that unknown persons accessed his official email ID, and emails were sent from it. When Mr Gopal checked the disaster recovery site of SEBI, he found that the email accounts of 11 officials were hacked, according to news reports. 
Additionally, SEBI notified that various mitigation measures were immediately taken in response to that cyber security incident including informing CERT-IN as per the standard operating procedure, and strengthening the system's required security configuration, among others. Notably, CERT-In is the national nodal agency for responding to computer security incidents as and when they occur.
“It was a small incident. CERT-IN is fully in the loop. No sensitive data was lost. Root cause has been diagnosed and fixed. Prevention for future has been fully implemented," according to an official spokesperson. The market regulator said that it monitors its detection and prevention systems and has taken additional measures post-incident to tighten the security procedures for the implementation and migration activities. 
Free Helpline
Legal Credit