2026 HDFC AMC — Morpheus ransomware claim; Bombay HC injunction (May 31)
Data compromised
Alleged mutual-fund investor PII and financial records per court filings
Technical writeup
HDFC Asset Management Company sought urgent Bombay High Court relief in late May 2026 after ransomware group Morpheus allegedly stole more than 680 GB of company and investor data—including names, addresses, PAN tax IDs, bank details, investment records, phones, emails, and employee records. The court issued a John Doe order restraining publication pending a June 16 hearing; DataBreaches.net noted Morpheus’s leak site had no public HDFC listing at catalog time. BreachHistory treats investor numerators as unverified until AMC or Indian regulators publish attested counts.
Root cause
Morpheus ransomware extortion claim (unverified public leak at catalog time)