Adjudication Order in the matter of Central Depository Services India Limited malware attack on November 18, 2022
Plain-language summary (AI-generated) — a quick read so you don't have to open the full PDF. May contain errors; the original document below is authoritative.
What is this order about?
This order addresses SEBI's findings regarding Central Depository Services (India) Limited's (CDSL) failure to comply with cybersecurity regulations following a malware attack on November 18, 2022, which impacted critical systems and operations.
Who it concerns
Central Depository Services (India) Limited, Mr. Rajesh Nadkarni, Mr. Amit Mahajan
What was found or directed
- CDSL failed to identify and classify critical assets including the ADFS server as per SEBI Circular dated July 6, 2015 (modified May 20, 2022)
- CDSL failed to conduct vulnerability scanning and penetration testing (VAPT) on all critical assets as required
- ADFS server was not included in VAPT and was not integrated with SIEM and PIM
- CDSL admitted it should have designated the ADFS server as critical
- CDSL violated multiple SEBI regulations including clauses of DP Regulations and SEBI Circulars
| Source body | Securities & Exchange Board of India (SEBI) — enforcement orders |
| Reference number | Order/JS/RJ/2026-27/32498-32500 |
| Status | closed (section: order) |
| Year | 2026 |
| Closing date | — |
| Documents | 1 |
Highlights & Points worth asking
Auto-generated, neutral observations. Auto-generated from public documents. May contain errors. Not legal or financial advice. Always verify against the linked original document. KaunZimmedar is a platform, not an authority.
No automated observations for this document. Read the documents below directly.
Documents
The original government PDF is the authoritative source — shown below, or open it full-screen in a new tab.
Order
2026-07-20
ORDER_1784545225.pdf
Tap “Open the PDF” above to view this document.
Discussion (0)
Citizens discussing these documents. A discussion space — nothing here is verified fact or an official finding. Reading is free; sign in to take part.
Open discussion (0) →