Skip to content
WorldBrand.AI

Central Depository Services Limited controversies

Controversies tied to this brand in public sources. A listing is not a finding of fault.

Back to profile1 entries

  1. 2021

    Alleged exposure of investor data at CDSL Ventures

    Issue disclosure

    In a news report, cybersecurity consultancy CyberX9 alleged that a vulnerability at CDSL Ventures exposed the financial and personal data of more than four crore investors twice within 10 days. According to the article, CDSL Ventures said it had fixed the vulnerability and taken steps to mitigate potential security issues. The report presents the allegation and the company's response; it does not describe further outcomes or additional findings.

    Company response

    • Remediation — CVL

      CVL, on its part, has said it has fixed the vulnerability and also taken steps to mitigate any other potential security issues.

    • Remediation — CDSL Ventures Limited (CVL)

      CVL had received a vulnerability alert on the website of CVL which has since been mitigated.

    • Clarification — CDSL

      When contacted CDSL said that there has been no security issue or data vulnerability at CDSL.

    Source excerpt

    • cyber security consultancy start-up CyberX9 has alleged that a vulnerability at CVL has exposed the financial and personal data of more than four crore investors twice in a period of 10 days.
    • CVL, on its part, has said it has fixed the vulnerability and also taken steps to mitigate any other potential security issues.
    • According to CyberX9, it reported the vulnerability on October 19, to CDSL and the securities depository took around 7 days to fix it which could have been resolved immediately.
    Source