Spandana Sphoorty reports ₹7.80 crore transfers to 82 accounts

Spandana Sphoorty Financial Limited reported a cyber fraud in which unauthorised transactions totalling approximately ₹7.80 crore were debited from one bank account on November 1, 2026. The transfers were made in multiple transactions during the day to 82 beneficiary accounts; services were stopped, while reversal, investigation and insurance steps began.

What happened in the Spandana Sphoorty cyber fraud?

Spandana Sphoorty identified unauthorised transactions through a cyber fraud on November 1, 2026, involving approximately ₹7.80 crore debited from one of its bank accounts. The company disclosed the incident to BSE Limited and the National Stock Exchange of India Limited on November 2, 2026, under Regulation 30 of the Securities and Exchange Board of India Listing Obligations and Disclosure Requirements Regulations, 2015.

The disclosure describes the event as multiple transactions during November 1 rather than one transaction. Those transactions were transferred to 82 beneficiary accounts, according to the annexure accompanying the November 2 filing. This means the reported ₹7.80 crore left a single company bank account but was dispersed across multiple recipients. Spandana Sphoorty did not identify the beneficiary accounts or the persons involved, stating that those details remain under investigation.

How much money and how many accounts were involved?

The estimated financial impact and estimated amount involved were both listed as approximately ₹7.80 crore. Spandana Sphoorty therefore reported no difference, in its November 2 disclosure, between the stated impact on the company and the amount transferred through the unauthorised transactions. The filing does not quantify any amount recovered, reversed or frozen as of that date.

The 82 beneficiary accounts are a central feature of the disclosure because they show that the ₹7.80 crore was distributed among multiple destination accounts. Spandana Sphoorty did not provide a split of the amount by beneficiary, the number of transactions, or the bank holding each beneficiary account. It also did not state whether all 82 accounts had been frozen by November 2, 2026; it said the bank had been asked to freeze them.

What actions did Spandana Sphoorty take after detecting the incident?

Spandana Sphoorty said it immediately stopped the affected services in its production environment after identifying the November 1, 2026 incident. The filing does not specify which services were affected, when they were restored, or whether the stoppage affected customers, operations or other bank accounts. It establishes only that the company halted the affected services as an immediate response measure.

On November 1, Spandana Sphoorty registered a cyber fraud complaint on the National Cyber Crime Reporting Portal through helpline 1930. It also reported the matter to the relevant bank and requested reversal of the transactions, freezing of the beneficiary accounts and a detailed investigation. The company said other appropriate authorities were also being informed, but did not name them in the annexure.

Is Spandana Sphoorty seeking recovery and insurance payment?

Spandana Sphoorty is seeking reversal through its bank and said it has cyber-fraud insurance, for which a claim is being filed. The filing does not state the insurer's name, the policy limit, any deductible, or the value of any expected insurance recovery. As of the November 2 announcement, the company presented the claim as being filed rather than accepted or paid.

Recovery remains unresolved because the company only disclosed requests to the bank for reversal and account freezing. No figure was provided for funds stopped before transfer, money retrieved from the 82 accounts, or amounts still available for recovery. The company said it would update exchanges on developments, including recoveries and the outcome of its investigation, as the inquiry progresses.

What does Spandana Sphoorty still need to establish?

Spandana Sphoorty still needs to establish the persons involved and the detailed nature of the cyber fraud, both of which were under investigation on November 2, 2026. The company did not disclose the method used to initiate the unauthorised transactions, the timing of detection during November 1, or whether any internal or external systems were compromised. Those omissions reflect the preliminary status of the inquiry described in the filing.

The company also has not reported a final net financial effect from the ₹7.80 crore incident. Its stated estimated impact is approximate, while bank reversals, potential freezing of 82 beneficiary accounts and the insurance claim remain in progress. Investors and other readers therefore have a disclosed gross amount involved, but not a confirmed recovered amount, insurance proceeds or final loss figure.

Conclusion

Spandana Sphoorty disclosed a ₹7.80 crore cyber fraud arising from multiple unauthorised transactions on November 1, 2026, from one bank account to 82 beneficiary accounts. The company’s response combined a production-service stoppage, a National Cyber Crime Reporting Portal complaint, requests to its bank for reversal and freezing, and a cyber-fraud insurance claim.

The next disclosed developments to watch are recoveries, the bank’s response to requests covering the 82 beneficiary accounts, and the investigation’s outcome. Spandana Sphoorty said it would intimate exchanges as the inquiry progresses, but its November 2 filing did not set a timetable for reversals, recovery, insurance settlement or a final assessment of the incident.