Delhi High Court Orders Protection of Insurance Company’s Customer Data Following Threatened Leak

Aastha Pareek 

The Delhi High Court recently directed various online platforms, including Telegram, to block accounts linked to an anonymous entity that threatened to leak sensitive customer data of Niva Bupa Health Insurance. The order was issued in response to a suit filed by the company seeking to safeguard its confidential information in the case of Niva Bupa Health Insurance Company Limited v. Telegram FZ-LLC & Ors.

Justice Manmeet Pritam Singh Arora, presiding over the case, emphasized that the disclosure of such data could cause significant harm to both the company and its customers. The Court noted that the misuse or unauthorized distribution of the data could lead to identity theft, financial fraud, privacy violations, and unauthorized transactions. Additionally, it observed that the data could be exploited to impersonate the company, potentially infringing on its registered trademark and causing irreparable damage.

The damage resulting from the publication, sale, or misuse of the data cannot be adequately compensated monetarily, particularly as the defendant remains unidentified,” the Court stated.

To mitigate the threat, the Court restrained the unknown entity from using, sharing, copying, distributing, or transmitting the company’s confidential information through any medium. It also directed Telegram and other internet-based platforms to take all necessary steps to remove or disable any accounts, domains, content, emails, or phone numbers that could be used to leak the data. Furthermore, these intermediaries were ordered to disclose all available details of the unidentified attacker.

The dispute arose after Niva Bupa Health Insurance received an email from an anonymous source claiming to have accessed a significant amount of its sensitive customer data. The email included a sample of the stolen information and threatened to leak it unless the company complied with the sender’s demands. The attacker also communicated with the company through a Telegram account and its website.

The company informed the Court that despite implementing extensive security measures, its systems appeared to have been breached.

The Court issued summons in the matter and has scheduled the next hearing for January 10, 2025.

Case Name:- Niva Bupa Health Insurance Company Limited v. Telegram FZ-LLC & Ors.

Case Number:- CS(COMM) 1089/2024

Bench:- Justice Manmeet Pritam Singh Arora

Click here to access the order.