HDFC AMC Data Breach: Forensic audit report expected next week

The country’s third-largest asset management company — HDFC AMC Ltd — is likely to get the forensic auditor’s report on the data breach by next week, according to the sources. Sources tell CNBC-TV18 that the asset manager had empanelled an independent forensic auditor last month, following an anonymous hacker’s breach of the fund house’s data in May 2026.

“The forensic report is just a week away. We will have clarity on what was compromised in the data leak. We have onboarded one of the global Big Five to do this audit,” according to the sources.

“Recently, we identified unauthorised activity affecting parts of our IT systems. We promptly activated our security response, isolated the affected systems, and engaged cybersecurity experts to investigate…. Your investments, units, and the value of your holdings have not been affected. This incident relates to data, not to your money or your portfolio,” the fund house told unit-holders earlier this month.

Sources added that the data breach could be as large as 600 gigabytes (GB), but it may not include sensitive data. “None of the mutual funds store bank details data or PAN card data with themselves. That is stored with CAMS, and is safe,” a senior industry executive said on the condition of anonymity.

CAMS is the short form for Computer Age Management Services Limited, a mutual fund transfer agency. The company has also obtained an order from the Bombay High Court restraining anyone from publishing, circulating, or misusing the affected data.

According to the Association of Mutual Funds in India (AMFI), HDFC AMC manages assets under management (AUM) of ₹9.35 lakh crore. The responses from the HDFC AMC are awaited.