ShadowMap

Dark Web Exposure for npci.org.in

Credentials, devices and data found in dark web stealer logs & breaches
53
Exposure level: Elevated
npci.org.in scores 53/100 based on leaked credentials, compromised devices, and stolen financial & session data found on the dark web.
Most recent exposure 20 days ago Last 90 days -14% 30% reuse a top-10 password
Employee exposure
corporate accounts — @npci.org.in
81
leaked credentials · 20 compromised devices
Top exposed employee accounts
abhay.tha***@npci.org.in20
rohan.patnaik_***@npci.org.in16
vendor.mana***@npci.org.in12
atul.***@npci.org.in7
npcinetl2***@npci.org.in7
Where staff accounts were caught
webmail.npci.org.in11
login.microsoftonline.com9
cloudsso.cisco.com6
npci.udemy.com5
www.kaggle.com5
Customer exposure
stolen logins for npci.org.in
508
leaked credentials · 46 compromised devices
Top exposed customer accounts
02/2957
03/2925
10/3019
tmsx0115
thyagavalli1***@gmail.com13
Most targeted services
enach.npci.org.in183
nach.npci.org.in127
swasrec.npci.org.in104
swasrec2.npci.org.in27
webmail.npci.org.in22
578
Exposed Credentials
63
Compromised Devices
0
Credit Cards
0
Crypto Wallets
44
Auth Tokens
56,773
Stolen Cookies

Exposure over time (credentials leaked per month)

2024-012026-05

Corporate SaaS & shadow-IT exposed (employee logins to third-party services)

Cisco9
Microsoft 3659

Most common passwords 30% reuse a top-10 password

Ka***455
Mu***565
14***074
85***874
Au***194
Re***904
58***823
76***hp3
ad***in3
****2

Stolen sessions (active cookies that can bypass MFA)

youtube.com1,879
google.com824
adnxs.com698
pubmatic.com626
bing.com567
criteo.com519

Financial, crypto & app tokens

App / session tokens
Google41
Telegram2
Discord1

Browsers & apps affected

Chrome [Default]2
Google Chrome (Default)2
Google Chrome (Profile 16)2
Google Chrome (Profile 2)2
Google Chrome [Profile 4]2
Microsoft Edge (Default)2

Stealer malware families seen

RedLine

Related companies

Explore

Check your own exposure →

Free dark web & attack-surface check by ShadowMap

Figures are aggregate counts derived from dark web stealer logs and public breach data. Data is indicative and updated periodically.