Spandana Sphoorty Financial reports ₹7.80 crore cyber fraud

Spandana Sphoorty Financial Limited reported on November 2, 2026, that unauthorised transfers totaling about ₹7.80 crore were made from one bank account on November 1, 2026. The microfinance lender said the money was sent through multiple transactions to 82 beneficiary accounts, prompting it to stop affected services and seek recovery through its bank.

What happened in the Spandana Sphoorty Financial cyber fraud?

Spandana Sphoorty Financial identified a cyber fraud incident involving unauthorised debits from one of its bank accounts on November 1, 2026. The transfers totaled approximately ₹7.80 crore, or about ₹78 million, and were routed through multiple transactions to 82 beneficiary accounts.

The company disclosed the incident to the stock exchanges on November 2 under Regulation 30 of the SEBI (Listing Obligations and Disclosure Requirements) Regulations, 2015. Its filing described the event as a cyber fraud and said details of the incident remained under investigation. The available disclosure does not identify the bank from which the transactions were made.

How did Spandana Sphoorty Financial respond to the incident?

Spandana Sphoorty Financial said it stopped the affected services in its production environment immediately after identifying the unauthorised transactions. This was the company’s stated operational response while it began efforts to trace and recover the funds.

The lender informed its bank and requested reversal of the transactions, freezing of the beneficiary accounts and a detailed investigation. It also lodged a complaint through the National Cyber Crime Reporting Portal, including the 1930 helpline route, on November 1 and began notifying relevant authorities. These actions indicate that the company is pursuing both banking-channel recovery and a formal cybercrime investigation.

What is known about the fund recovery and investigation?

Spandana Sphoorty Financial has not confirmed any recovery from the approximately ₹7.80 crore transferred from its bank account. The company has said it will update stock exchanges on developments, including recoveries and the outcome of the investigation.

The incident involved 82 beneficiary accounts, which makes the bank’s requested freezing action significant to the recovery process. However, neither the route used to initiate the transfers nor the identity of the beneficiaries has been disclosed. The company has also not provided an estimate of the financial loss that may remain after recoveries, if any.

Why does the cyber fraud matter for investors and operations?

The incident matters because Spandana Sphoorty Financial is a microfinance lender that provides small-value unsecured loans to low-income customers in semi-urban and rural areas. Bank-account security and continuity of production systems are therefore important for the company’s routine operational processes, even though the filing does not specify whether customer-facing services were affected.

For investors, the immediate financial exposure disclosed is approximately ₹7.80 crore before any potential recovery. The eventual accounting impact cannot be determined from the available information because the investigation is ongoing and the company has not reported how much, if any, of the amount has been recovered. No share-price movement or change in financial guidance was included in the provided disclosure.

What is the broader governance context for Spandana Sphoorty Financial?

Spandana Sphoorty Financial’s annual report for the year ended March 31, 2026 said the company had an independent internal audit department led by its Chief Internal Auditor, Sunand Sahu. The report stated that the internal audit function assesses and contributes to governance, risk-management and control processes.

The company also said in its annual report that it complied with applicable acts, rules, regulations and secretarial standards during FY26. Its statutory auditor, BSR & Co. LLP, was appointed at the July 30, 2024 annual general meeting for a three-year term ending with the annual general meeting scheduled in calendar year 2027, subject to applicable eligibility requirements.

Conclusion

The reported cyber fraud has created a disclosed exposure of about ₹7.80 crore for Spandana Sphoorty Financial, with funds sent to 82 accounts through unauthorised transfers. The company’s immediate actions were to halt affected services, seek transaction reversal and account freezes from its bank, and register a cybercrime complaint.

The key development to watch is the company’s next exchange update on recoveries and the investigation outcome. Spandana Sphoorty Financial has explicitly said it will communicate further developments as the inquiry progresses, while the amount ultimately recovered remains unresolved.