Capital markets regulator Sebi has imposed a penalty of Rs 1 crore on Central Depository Services (India) Ltd, or CDSL, for cybersecurity lapses linked to a malware attack in November 2022 that disrupted key depository operations and delayed market settlements.
The adjudication order was passed in the matter of the malware attack on CDSL on November 18, 2022. The order also named Rajesh Nadkarni, then chief information security officer, and Amit Mahajan, then chief technology officer, as noticees. SEBI, however, disposed of proceedings against the two former officials without imposing any monetary penalty.
