{"schema_version":"0.10.0","id":"LR-2026-0635","record_version":1,"title":"Sky Gold subsidiary suffers loss after deepfake scam and unauthorised fund transfer","verification":{"human_verified":false,"method":"automated_gate","auto_verified":true,"score":42.5,"score_breakdown":{"source_authority":12.1,"independent_corroboration":7.0,"implicated_party_confirmed":0.0,"citation_integrity":14.0,"specificity":0.0,"completeness":2.24,"unhedged_language":5.0},"checks":{"schema_valid":true,"every_field_cited":true,"quotes_verbatim":true,"source_fetched":true,"distinct_incident":true,"dates_plausible":true,"sources_agree":true,"source_describes_incident":true,"severe_backed_by_source":true,"record_integrity":true,"eligible":true,"about_this_case":true},"gate_version":"gate-2026-10-18.7","cross_check_model":null,"cross_check_agreement":null,"duplicate_of":null,"verified_by":null,"verified_at":"2026-11-01","extraction_run_id":null,"evidence_level":{"level":"preliminary","reason":"Publisher not yet named · subject to change","original_document":null,"reports_total":1,"reports_independent":0,"reports_derivative":0,"developing":false,"disputed":false,"rules_version":"evidence-2026-10-29.1","computed_at":"2026-11-01","history":[{"date":"2026-11-01","from_level":null,"to_level":"preliminary","reason":"Publisher not yet named · subject to change"}]},"sources_hash":"e8ffcd0397c5b5f285b7223ea7b9d02a9cb0adb2ca4f7639a05016d8a19deb43"},"system":{"model_name":null,"model_version":null,"developer":"unknown","harness":null,"tools_granted":[],"permissions_scope":null,"autonomy_level":"unknown","guardrails_present":[],"deployment_context":"unknown","tier":null,"lifecycle_stage":null,"integration_type":null,"intended_use":null,"safeguard_state":null,"production_intended":null},"event":{"date_occurred":null,"date_disclosed":"2026-07-17","incident_class":"security_compromise","failure_class":null,"agent_involved":null,"secondary_failure_classes":[],"trigger":"unknown","duration":null,"detection_method":"unknown","summary":"Sky Gold's subsidiary reported a loss after unknown persons gained unauthorised access to a company-issued mobile phone and laptop and impersonated one of its directors. Believing the instructions were genuine, an employee processed fund transfers from the subsidiary's bank account to unknown bank accounts. Subsequent verification confirmed the director had issued no such instructions. After discovery, the subsidiary reported the matter to the National Cyber Crime Helpline and the Cyber Crime Police Station, and began steps with its bankers to trace and freeze the beneficiary accounts. The company said there was no indication of compromise of its IT systems, network infrastructure, customer data, or employee databases.","tags":[],"date_detected":null,"near_miss":null,"root_cause":null,"root_cause_detail":null,"failure_class_detail":null,"responsible_party":null,"adversarial_actor":null,"input_provenance":null,"time_to_contain":null,"operations_paused":null,"remediation":null,"precursor_events":null},"impact":{"direct_loss_usd":null,"remediation_hours":null,"records_exposed":null,"third_parties_affected_count":null,"severity":"minor","severity_because":"Minor test: the company states the incident appears limited to a compromised company-issued phone and laptop and misuse of communication channels, contained to the subsidiary, with no third party stated as touched.","harm_class":["financial"],"affected_description":null,"protected_class_involved":null,"data_categories_exposed":[],"loss_range_usd":null,"reversibility":null,"downstream_exposure_count":null},"evidence":{"sources":[{"url":"https://m.economictimes.com/markets/stocks/news/deepfake-scam-rattles-sky-gold-as-subsidiary-suffers-rs-11-crore-loss-after-unauthorised-fund-transfer/articleshow/132451985.cms","publisher":"The Economic Times","date":"2026-07-17","type":"press","title":"Deepfake scam rattles Sky Gold as subsidiary suffers Rs 11 crore loss after unauthorised fund transfer - The Economic Times","archived_url":null,"attachment":"first_report"}],"per_field_confidence":{"event.incident_class":"C","impact.harm_class":"C","impact.severity":"D","impact.severity_because":"D","event.summary":"C","system.autonomy_level":"D","system.deployment_context":"D","event.trigger":"D","event.detection_method":"D","context.country":"D","system.developer":"D","event.date_disclosed":"D","context.denominator_available":"D"},"field_citations":{"event.incident_class":[{"source_index":0,"quote":"The company said the fraud was carried out using advanced deepfake techniques, including profile cloning and coercion, which led to unauthorised fund transfers."}],"impact.harm_class":[{"source_index":0,"quote":"Believing the instructions to be genuine, an employee processed certain fund transfers from the subsidiary's bank account to unknown bank accounts."}],"impact.severity":[{"source_index":0,"quote":"The company added that the incident appears to be limited to the unauthorised compromise of a company-issued mobile phone and laptop, and the misuse of communication channels."}],"impact.severity_because":[{"source_index":0,"quote":"The company added that the incident appears to be limited to the unauthorised compromise of a company-issued mobile phone and laptop, and the misuse of communication channels."}],"event.summary":[{"source_index":0,"quote":"According to the disclosure, unknown persons gained unauthorised access to a company-issued mobile phone and laptop and impersonated one of the subsidiary's directors."},{"source_index":0,"quote":"Believing the instructions to be genuine, an employee processed certain fund transfers from the subsidiary's bank account to unknown bank accounts."},{"source_index":0,"quote":"Subsequent verification confirmed that the director had not issued any such instructions."},{"source_index":0,"quote":"Following the discovery of the incident, the subsidiary immediately reported the matter to the National Cyber Crime Helpline and the jurisdictional Cyber Crime Police Station."},{"source_index":0,"quote":"It also initiated the necessary steps with its bankers to trace and freeze the beneficiary accounts in an effort to maximise the chances of recovering the funds."},{"source_index":0,"quote":"Based on the information available so far, Sky Gold said there is no indication of any breach or compromise of the company's or the subsidiary's IT systems, network infrastructure, customer data, or employee databases."}]},"notes_on_gaps":"The sources do not state the loss amount in the article body; the Rs 11 crore figure appears only in the URL slug and was not used. No date of occurrence is stated, and the article date 2026-07-17 was not used as date_disclosed because it is a publication date, not a stated disclosure date. No AI system, model, developer, or agent is named, and the sources do not say an AI agent was involved, so agent_involved, failure_class and system fields were left out; the deepfake attribution is the company's own claim. Detection method, root cause, responsible party, country and industry are not stated. No controls held, failed or were missing in the sources, so links is empty. Remediations are limited to reporting and bank tracing steps, which are not described as changes to controls, so remediations is empty. The order of verification relative to discovery is ambiguous, so timeline entries are in article order with null dates. Severity minor is my judgement from the company's statement that the incident is limited to one subsidiary's devices and communication channels, with no third party stated as touched, though the unknown beneficiary accounts were not assessed. [case created by the backfill: read by claude-haiku-5-5, backfill-2026-11-01.2, 2026-11-01; not yet reviewed] [2026-11-01: evidence level set: Preliminary (Publisher not yet named · subject to change)]"},"context":{"industry":null,"org_size_band":null,"country":"unknown","denominator_available":false,"denominator":null,"related_incident_ids":[],"systemic_exposure":null,"shared_model_id":null,"upstream_incident_id":null,"incident_evidence":null,"regulatory":null,"coverage":null}}