DPDP & India Privacy Intelligence | DATATrust India
India privacy intelligence
DPDP & India Privacy Intelligence
Indian data breaches, data leaks, privacy incidents and DPDP developments, each with its original source and a plain reading of why it may matter under the DPDP Act.
🇮🇳India — this feed covers Indian incidents and Indian regulatory developments only
New this week
1
Data breaches
4
Privacy incidents
2
DPDP updates
2
Regulatory updates
2
Demo data·This feed is not live yet.
Every record shown is illustrative and describes no real event, organisation or publication. Records carry no source link because inventing one would misrepresent a real publisher. Live collection from the approved source registry is not enabled.
Latest events
Every record carries its verification status and links to its original source. Severity is a DATATrust classification based on documented impact, not an official rating.
10 records
Data BreachHigh severity — DATATrust internal classification, based on the reported involvement of customer personal data and financial data. Not an official rating.Demo — illustrative record, describes no real event
An organisation in the financial services sector reported unauthorised access to a system holding customer records, and stated that an investigation was under way.
Data: Customer Data, Personal Data, Financial Data
Data LeakMedium severity — DATATrust internal classification, based on a reported record count and the absence of reported financial or health data. Not an official rating.Demo — illustrative record, describes no real event
A publicly accessible cloud storage container was reported to have exposed files containing personal data. The organisation responsible has not been named by the available source.
Government / Regulatory UpdateHigh severity — DATATrust internal classification, reflecting the advisory’s own stated urgency and the categories of system affected. Not an official rating.Demo — illustrative record, describes no real event
Illustrative national computer emergency response team
Industry
Technology
Published
08 Oct 2026
A government advisory described a vulnerability in a class of widely deployed software and recommended immediate patching. Systems in scope commonly process personal data.
DPDP DevelopmentInformational severity — Informational: a policy development rather than an incident. Severity is not applicable to records of this kind.Demo — illustrative record, describes no real event
A procedural notification relating to the operation of the DPDP framework was published, setting out steps that data fiduciaries are expected to follow.
Cyber Incident — DPDP RelevantCritical severity — DATATrust internal classification, based on confirmed encryption of production systems and the confirmed involvement of employee personal data. Not an official rating.Demo — illustrative record, describes no real event
A manufacturer confirmed a ransomware incident that encrypted systems including those holding employee records, and stated that operations had been restored from backups.
Data: Employee Data, Personal Data
Potential DPDP relevance: Breach classification · Employee data · Backup and recovery
ConfirmedOfficial Organization Disclosure
Details
Data Protection Board UpdateInformational severity — Informational: a procedural development rather than an incident. Severity is not applicable to records of this kind.Demo — illustrative record, describes no real event
A procedural development relating to how complaints are received and handled under the DPDP framework was reported. Operational detail was not published.
Potential DPDP relevance: Grievance redressal · Data principal rights · Regulatory engagement
ReportedEstablished News Organization
Details
Government / Regulatory UpdateMedium severity — DATATrust internal classification, reflecting a new reporting obligation with a defined deadline. Not an official rating.Demo — illustrative record, describes no real event
A sectoral regulator issued an order requiring regulated entities to report on cyber resilience arrangements, including the handling of incidents involving personal data.
Potential DPDP relevance: Sectoral overlap · Incident reporting · Evidence and records
ConfirmedOfficial Regulator
Details
Data BreachHigh severity — DATATrust internal classification, based on confirmed exposure of customer contact and order data. Not an official rating.Demo — illustrative record, describes no real event
A retailer confirmed that customer contact and order information was exposed through a third-party service provider, and stated that the provider’s access had been suspended.
Data LeakNot Rated severity — Not rated: the report is unconfirmed and no documented impact is available on which to base a classification.Demo — illustrative record, describes no real event
An unauthenticated API endpoint was alleged to return student records. The allegation has not been confirmed by the organisation concerned or by any authority.
Data: Personal Data, Unknown
Potential DPDP relevance: Access control · API security · Detection capability
