Hyderabad: The Telangana Cyber Security Bureau (TGCSB) has registered a case after a Hyderabad-based non-banking financial company (NBFC) reported that ₹3.3 crore was siphoned off from its bank account following an alleged cyberattack that lasted 87 minutes.The company’s chief financial officer (CFO) lodged a complaint at TGCSB headquarters on Oct 20, alleging that unidentified offenders accessed its systems and application programming interface (API) without authorisation between 10.31 am and 11.58 am on Oct 19.“During that period, 183 fund disbursals took place from the company’s bank account, and over ₹3.3 crore was transferred to 52 suspected beneficiary accounts without authorisation,” the complainant alleged.The breach was detected on the same day and reported on National Cyber Crime Reporting Portal (NCRP). The company urged the police to investigate the incident, identify the accused and freeze the beneficiary accounts.Based on the complaint, TGCSB registered a case under Sections 318(4) (cheating) and 319(2) (cheating by personation) of the Bharatiya Nyaya Sanhita (BNS), along with Sections 43, 66, 66C and 66D of the Information Technology Act.Preliminary investigations indicated that the accused allegedly carried out a targeted attack and rapidly routed the siphoned-off funds to multiple accounts before the company detected the breach and alerted the police. Police said that the fraudsters have withdrawn amounts ranging from Rs 50,000 to Rs 2 lakh in each transaction and they have sought relevant system/API logs, transaction records, bank statements, internal incident report and other supporting documents from the NBFC.“Only ₹40 lakh was blocked in the fraudsters’ accounts. The accused hacked into the NBFC’s systems. We are analysing the transactions to identify and arrest the offenders,” a TGCSB official said.
Source link
