CDSL shares fell as much as 4% on Monday, trading between Rs 1,364 and Rs 1,390, after India's markets regulator fined the depository Rs 1 crore (about $104,000) over cybersecurity failures tied to a 2022 malware attack. The stock had closed at Rs 1,418 on Friday.

The Securities and Exchange Board of India (SEBI), the regulator responsible for overseeing India's capital and securities markets, named CDSL, formally Central Depository Services (India) Limited, in Monday's order.

But the regulator didn’t pursue disciplinary action against CDSL’s former Chief Information Security Officer (CISO) or Chief Technology Officer (CTO).

A Cyberattack at Canada’s Investment Regulator Exposed Data of 750,000 Investors
The breach raises uncomfortable questions about how secure investor data really is when even the watchdogs are vulnerable.

What led to the fine?

On November 18, 2022, CDSL detected malware on its internal systems after completing its end-of-day operations. The depository immediately isolated the affected systems and disconnected from other market participants, causing delays to securities settlements.

The attack infected 135 servers and 177 computers, with settlement operations delayed by between 46 and 54.5 hours.

How the attack happened

Subscribe for free to continue reading this article

Subscribe Subscribe

Already Have an Account? Log In