[News](/news) Overview: BookMyForex Data Breach \[Denies Breach] [Blog](/blog)[Breaches](/breaches)[Resources](/resources)[News](/news) # Overview: BookMyForex Data Breach \[Denies Breach] ##### [UpGuard Team](/team/upguard) February 25, 2026 ### Key Facts: BookMyForex Data Breach * **Date reported:** February 25, 2026. * **Unauthorized access identified:** February 24, 2026. * **Target entity:** BookMyForex (bookmyforex.com) in partnership with Yes Bank. * **Source of breach:** Unknown (unauthorized third-party). * **Data types:** Customer card data, including card numbers, expiry dates, and CVVs. * **Status:** Disputed/Confirmed; while BookMyForex denied a breach of its internal systems, Yes Bank confirmed unauthorized transactions affecting 5,000 customers. * **Severity:** Medium; the incident resulted in approximately ₹2.55 crore in fraudulent charges across international merchants. [Start continuous breach monitoring with UpGuard.](https://www.upguard.com/product/breach-risk/threat-monitoring) ## What happened in the BookMyForex data breach? BookMyForex (bookmyforex.com) was the subject of security reports on February 25, 2026, involving a potential hack of sensitive financial information. While third-party reports suggested a data breach involving multi-currency cards issued with Yes Bank, the company has officially denied any compromise of its internal systems or customer data. The incident was categorized with low severity because the organization maintains that no unauthorized access occurred, despite Yes Bank identifying unusual transaction attempts on certain accounts. The reports indicated that hackers might have accessed sensitive card details, leading to unauthorized transactions. BookMyForex emphasized that customer funds remain secure and that real-time fraud monitoring is being prioritized to address the reports. While the company denies a direct breach, incidents involving financial services often carry risks of credential abuse or targeted phishing campaigns aimed at cardholders. ## Who is behind the incident? The attacker or cause of the incident has not been identified. ## Impact and risks for BookMyForex customers For customers of BookMyForex, the primary risk involves potential unauthorized transactions or phishing attempts if card details were indeed compromised. Even with the company's denial, individuals should be wary of identity theft or credential abuse. If sensitive financial data is exposed, attackers may attempt to use it for fraudulent purchases or to gain access to other linked financial accounts. Typical outcomes of such reports include increased scrutiny of account activity and a temporary loss of consumer trust. To mitigate these risks, users should regularly monitor their transaction history and update security settings on their accounts. Transparency from financial service providers is essential for maintaining security and ensuring that users can take timely protective actions. ## How to protect against similar security incidents Scan your domain for vulnerabilities in minutes ## Frequently asked questions ### What happened in the BookMyForex security breach? On February 25, 2026, reports surfaced of large-scale fraud affecting BookMyForex multi-currency cards issued in partnership with Yes Bank. While BookMyForex maintains that its own internal systems were not breached, Yes Bank confirmed unusual transaction attempts on certain accounts ### What data was exposed? The types of data involved in the BookMyForex incident have not been disclosed. ### Is my personal information at risk? If you interacted with BookMyForex, there's a possibility your personal information could be affected. Similar incidents often involve email addresses, login details, or financial records. Stay alert for updates and take precautionary measures to secure your accounts. ### How can I protect myself after this data breach? * Change your account passwords immediately. * Enable [multi-factor authentication (MFA)](https://www.upguard.com/blog/mfa-multi-factor-authentication) where available. * Monitor your financial accounts for unauthorized activity. * Be vigilant against phishing emails or texts. * Use data breach monitoring tools to stay informed. * Ensure you receive real-time SMS or email alerts for every transaction, no matter how small. ### What steps should companies take after being impacted by this breach? BookMyForex is expected to secure its systems, notify any affected parties, and provide guidance on protective actions. Organizations in this situation typically review their security measures and deploy [attack surface management](https://www.upguard.com/product/breach-risk/attack-surface-management) to detect and remediate vulnerabilities. ## How secure is Gemini said BookMyForex ? BookMyForex (bookmyforex.com) is India's first and largest online marketplace for foreign exchange and international remittances. * View our free preliminary report on Gemini said BookMyForex ’s security posture * 13 risk factors, including email security, SSL, DNS health, open ports and common vulnerabilities [View Gemini said BookMyForex 's score](/security-report/gemini-said-bookmyforex) [View score](/security-report/gemini-said-bookmyforex) [https://bookmyforex.com](/security-report/gemini-said-bookmyforex) ### Sign up for our newsletter UpGuard's monthly newsletter cuts through the noise and brings you what matters most: our breaking research, in-depth analysis of emerging threats, and actionable strategic insights. ## Latest news Stay up-to-date with the latest news in cybersecurity. [](/news/hugging-face-data-breach-2026-07-20) #### [Hugging Face data breach: key facts and what we know so far](/news/hugging-face-data-breach-2026-07-20) A data breach involving Hugging Face was reported in July 2026. See incident details, impact on customers, and recommended security measures. ##### [UpGuard Team](/team/upguard) July 20, 2026 [](/news/ey-data-breach-2026-07-19) #### [EY data breach: what happened and what's at risk](/news/ey-data-breach-2026-07-19) A data breach involving EY was reported in July 2026. See incident details, impact on customers, and recommended security measures. ##### [UpGuard Team](/team/upguard) July 15, 2026 [](/news/south-florida-injury-convenient-care-data-breach-2026-07-16) #### [South Florida Injury & Convenient Care data breach exposes names and Social Security numbers](/news/south-florida-injury-convenient-care-data-breach-2026-07-16) A data breach involving South Florida Injury & Convenient Care was reported in July 2026. See incident details, impact on customers, and security measures. ##### [UpGuard Team](/team/upguard) July 15, 2026 [](/news/park-west-psychology-data-breach-2026-07-16) #### [Park West Psychology data breach: what happened and what's at risk](/news/park-west-psychology-data-breach-2026-07-16) A data breach involving Park West Psychology was reported in July 2026. See incident details, impact on customers, and recommended security measures. ##### [UpGuard Team](/team/upguard) July 15, 2026 [](/news/fall-river-municipal-credit-union-data-breach-2026-07-16) #### [Fall River Municipal Credit Union data breach: what happened and what's at risk](/news/fall-river-municipal-credit-union-data-breach-2026-07-16) A data breach involving Fall River Municipal Credit Union was reported in July 2026. See incident details, impact on customers, and recommended security measures. ##### [](#) July 14, 2026 [](/news/npcil-data-breach-2026-07-16) #### [NPCIL data breach: World Leaks claims exposure of Kudankulam Nuclear Power Plant files](/news/npcil-data-breach-2026-07-16) A data breach involving NPCIL was reported in July 2026. See incident details, impact on customers, and recommended security measures. ##### [UpGuard Team](/team/upguard) July 14, 2026 [View all news](/news) ## Protect your organization Get in touch or book a free demo. [Contact sales](/demo) [Free demo](/demo) ##### Free instant security score ## How secure is your organization? Request a free cybersecurity report to discover key risks on your website, email, network, and brand. * Instant insights you can act on immediately * Hundreds of risk factors including email security, SSL, DNS health, open ports and common vulnerabilities [Free score](/instant-security-score)