NuPay
- Breach date
- 25 September 2025
- People affected
- Not disclosed
- Status
- Acknowledged
- The affected entity publicly confirmed the breach.
Data exposed
- Bank account numbers
- Transaction amounts
- Contact details
- Signed NACH mandate forms
Notice or statement
NuPay's co-founder and COO confirmed the company "addressed a configuration gap in an Amazon S3 storage bucket", but claimed most files were "dummy or test files" — a characterisation researchers at UpGuard disputed.
Grievance redressal
The storage bucket was secured. No notification to affected account holders was disclosed.
Sources
Something wrong or missing on this record? Open an issue. Record ID nupay-2025.