Cases › security breach › LR-2026-0635
Sky Gold subsidiary suffers loss after deepfake scam and unauthorised fund transfer
Preliminary Why: Publisher not yet named · subject to change
Status: no action reported
No source states: loss or records, developer and model, agent tool, could do, deployer, industry.
Severity minor: test: the company states the incident appears limited to a compromised company-issued phone and laptop and misuse of communication channels, contained to the subsidiary, with no third party stated as touched.
Sky Gold's subsidiary reported a loss after unknown persons gained unauthorised access to a company-issued mobile phone and laptop and impersonated one of its directors. Believing the instructions were genuine, an employee processed fund transfers from the subsidiary's bank account to unknown bank accounts. Subsequent verification confirmed the director had issued no such instructions. After discovery, the subsidiary reported the matter to the National Cyber Crime Helpline and the Cyber Crime Police Station, and began steps with its bankers to trace and freeze the beneficiary accounts. The company said there was no indication of compromise of its IT systems, network infrastructure, customer data, or employee databases.
What happened
No source tells the story step by step yet.
What was done
No source states an action or fix.
Risks
Sorted by rule from the case's fields; not yet read from the sources.
Controls
Not yet read for controls. Controls that mitigate the primary risk:
ModelMarking machine-made output · Abuse monitoring and account enforcement · Content safety classifiers
ApplicationPeople told they are dealing with AI
Infrastructure / targetEvidence
No source states: a step-by-step account, when it happened, when it was found, how many records were exposed, the direct loss, a count of the other parties affected, any court case, the cause, what set it off, what was done.
Show every field, with its source and grade
What happened
Impact
Notes on gaps
The sources do not state the loss amount in the article body; the Rs 11 crore figure appears only in the URL slug and was not used. Remediations are limited to reporting and bank tracing steps, which are not described as changes to controls, so remediations is empty.
LR-2026-0635 · version 1 · published 2026-11-01 after automatic checks; not yet checked field by field by a person · JSON