CDSL shares fell as much as 4% on Monday, trading between Rs 1,364 and Rs 1,390, after India's markets regulator fined the depository Rs 1 crore (about $104,000) over cybersecurity failures tied to a 2022 malware attack. The stock had closed at Rs 1,418 on Friday.
The Securities and Exchange Board of India (SEBI), the regulator responsible for overseeing India's capital and securities markets, named CDSL, formally Central Depository Services (India) Limited, in Monday's order.
But the regulator didn’t pursue disciplinary action against CDSL’s former Chief Information Security Officer (CISO) or Chief Technology Officer (CTO).
What led to the fine?
On November 18, 2022, CDSL detected malware on its internal systems after completing its end-of-day operations. The depository immediately isolated the affected systems and disconnected from other market participants, causing delays to securities settlements.
The attack infected 135 servers and 177 computers, with settlement operations delayed by between 46 and 54.5 hours.
How the attack happened
Subscribe for free to continue reading this article
Subscribe SubscribeAlready Have an Account? Log In
