A public record of data breaches affecting people in India.
When an organisation loses your data, you are usually the last to hear about it — if you hear at all. PlugTheBreach tracks those incidents in one place, with a citation for every claim and an explicit note on whether the organisation ever admitted what happened.
An initiative of the Internet Freedom Foundation.
- Incidents
- 108
- Period
- 2016–2026
- Reported reach
- 6.99 billion
- Never acknowledged
- 47
Reach counts only the incidents where a figure was ever reported, and reported figures are frequently disputed. It cannot be read as a headcount — the same person appears in many breaches. "Never acknowledged" covers incidents the organisation denied, ignored, or has yet to respond to.
Most recent
All 108 records- Bank of Baroda28 July 2026Not disclosedPartly acknowledged
- Tata Electronics12 June 2026Not disclosedAcknowledged
- Reliance Group (Kudankulam plant records)11 June 2026Not disclosedPartly acknowledged
- Parle Agro16 May 2026Not disclosedUnverified
- Guidely11 May 20261.5 millionUnverified
- BLS International9 May 202629 millionUnverified
- Punjab National Bank5 May 20261,00,000Unverified
- Cognizant21 April 2026Not disclosedAcknowledged