Cyberattacks hit about 20 financial institutions, CERT-In warns
In short
Around 20 financial institutions were hit by cyberattacks earlier this month. Hackers were said to have used stolen partner-bank logins and weak payment APIs to move money out.
CERT-In told banks, NBFCs and fintech firms to shut compromised interfaces and tighten checks. The exact institutions and losses are not stated.
What the reporting says
Around 20 financial institutions were affected by cyberattacks earlier this month, with hackers allegedly using stolen partner-bank credentials and payment API vulnerabilities to siphon off funds. CERT-In followed with an advisory urging banks, NBFCs and fintech firms to suspend compromised interfaces, strengthen transaction safeguards and tighten customer verification. The reporting does not say which institutions were hit or how much money was lost.
Why it matters
Around 20 financial institutions were reportedly affected by cyberattacks earlier this month, with the attacks linked to stolen partner-bank credentials and vulnerabilities in payment APIs. CERT-In then issued guidance for banks, NBFCs and fintech firms to suspend compromised interfaces and strengthen customer verification. The reporting does not identify the victims, confirm total losses, or say whether the attacks have been fully contained.