DFX Intelligence
Which companies just had a verified incident, who lends to them and who owns them. Every claim carries its evidence level and its source. How we decide what is confirmed
Global Financial Service Disruptions
C-Edge Technologies (about 300 Indian cooperative and regional rural banks)
core banking vendor · IN · South Asia · C-Edge Technologies Ltd. (SBI and TCS JV)
Confirmed cyberStatus: resolvedTier 1Severity 4 of 5Evidence confidence: highAnalyst-verified
A ransomware attack on core banking provider C-Edge Technologies led NPCI to cut it off from retail payment systems on 31 July 2024, leaving about 300 small Indian banks without UPI, IMPS or ATM service. NPCI restored connectivity on 1 August after a security review.
- First disruption
- Jul 29
- First public signal
- unknown
- Acknowledged
- Jul 31
- Restored
- Aug 1
- Duration
- not established
- DFX first recorded
- Nov 5 14:58 UTC
What was restricted
instant paymentsatmtransfers outScope: multi institution
Customers of about 300 cooperative banks and RRBs (including 17 Gujarat district cooperative banks) unable to use UPI, IMPS or ATMs.
Cause, kept in separate layers
- What the institution said
- Ransomware on C-Edge systems hosted in its own data centre; NPCI isolated C-Edge from retail payments
- DFX classification
- Confirmed cyber (cyber: confirmed)
- Conflicting reports
- NPCI informed on 26 Jul; some reports place outage start 29 Jul; affected count 200 to 300.
Dependencies
A dependency is a documented relationship. It is not evidence that the provider was compromised.
- Provider: C-Edge Technologies (core banking and payment switch provider), verified
Evidence
- Finextra · 2024-08-01
- CSO Online · 2024-08
- YourStory · 2024-08-01
- Moneylife · 2024-08