Hyderabad: A Hyderabad-based non-banking financial company (NBFC) has lodged a complaint with the Telangana Cyber Security Bureau (TGCSB), alleging that it was targeted in a cyber attack and financial fraud in which ₹7.8 crore was illegally transferred from the company’s corporate account to 82 bank accounts within about six hours and 40 minutes on Nov 1. Based on the complaint, the TGCSB has registered a case.A representative of the company alleged that more than ₹7.8 crore was transferred from its HSBC Bank corporate account to various beneficiary accounts on November 1. “The transfers were made between about 10.18 am and 4.58 pm. The first transfer was a payment of ₹1 to an account named ‘TEST’, and the largest single transfer was ₹49.99 lakh. Several accounts received repeated payments. While current accounts held by companies received larger amounts, savings accounts held by individuals received payments of about ₹1 lakh,” a TGCSB official said.In its complaint to the TGCSB on the evening of Nov 2, the company said it had asked its partner bank to suspend the compromised channels. The police were also requested to issue freeze notices to the recipient banks. “Launch an investigation into the perpetrators’ digital signatures and IP footprints,” the complainant requested.Based on the complaint, the TGCSB Headquarters police station registered a case on Monday under Sections 318(4) (cheating) and 319(2) (cheating by personation) of the BNS and Sections 43, 66, 66C and 66D of the Information Technology Act. “We are analysing the bank transactions to identify the accused. We are also collecting details of the cyber attack and fraud from the complainant,” an investigator said.In an intimation submitted to the BSE and NSE on Nov 2 under Regulation 30 of the SEBI (Listing Obligations and Disclosure Requirements) Regulations, the NBFC said: “The company immediately stopped the affected services in its production environment. The matter has been reported to the bank with a request for reversal of the transactions, freezing of the beneficiary accounts and a detailed investigation.” The company also said it has cyber fraud insurance and is in the process of filing a claim.
