Sometime in mid-2018, the website of the Institute of Chartered Accountants of India (icai.org), India’s largest professional accounting body operating under the administrative control of the Ministry of Corporate Affairs, suffered a data breach. Reports indicate that an 8.3GB .SQL file containing details of approximately 300,000 unique members, along with additional records, was exposed. Among the compromised data were membership numbers, names, dates of birth, addresses, geographic locations, phone and mobile numbers, email addresses, registration dates, and payment-related information such as order numbers, transaction IDs, GSTIN details, and cheque numbers. The breach also included records related to professional memberships, course details, and invoices.