Unifinz Capital India Ltd has informed the exchange of a cyber fraud incident involving unauthorized transfers totaling Rs 7.69 crore. The breach bypassed the company's automated API disbursal engine, leading to 346 unauthorized transactions. The company has frozen the affected accounts and filed a formal complaint with the National Cyber Crime Reporting Portal. While business operations remain unaffected, the incident raises significant questions regarding internal security controls and the potential recovery of the lost funds.
Unifinz Capital Discloses Rs 7.69 Crore Cyber Fraud
Financial impact of Rs 7.69 crore confirmed across 346 unauthorized transactions.
Company confirms breach occurred via unauthorized access to its automated API disbursal engine.
Reader Takeaway: The incident highlights critical security gaps in automated payment processes; focus remains on future recovery and control remediation.
What just happened
Unifinz Capital India Ltd reported a cyber fraud incident to the exchange involving unauthorized fund transfers. The incident occurred on October 20, 2026, and was identified by the company on October 21, 2026. An unidentified third party successfully bypassed the company’s normal payment and authorization processes, specifically targeting the automated API integrated disbursal engine.
Why this matters
The financial impact is estimated at Rs 7.69 crore (Rs 7,69,26,114). The breach involved 346 separate transactions, each valued between Rs 19,996 and Rs 2,49,999, which were moved into third-party bank accounts. For shareholders, this reveals a vulnerability in the company's digital infrastructure that allowed external actors to execute payments without proper authorization.
What changes now
The company has instructed its bank to freeze the affected disbursal account to prevent further unauthorized outflows. A formal complaint has been filed with the National Cyber Crime Reporting Portal. Management is currently pursuing recovery proceedings, though the final financial impact will depend on the success of these efforts.
Risks to watch
The primary risk is the failure of internal security protocols. Investors should watch for updates on the investigation, specifically whether the company initiates a total overhaul of its API security and payment authorization layer. The ability to recover the lost Rs 7.69 crore remains uncertain and will likely impact the company's near-term balance sheet.
What to track next
Watch for further disclosures regarding the forensic investigation results and any regulatory actions taken following the cybercrime complaint. The company’s ability to prevent a recurrence and restore trust in its internal digital controls will be critical for investor sentiment.