UPPCL India Power Corporation 1.35M Consumer Data Breach
In November 2025, an extensive customer billing export originating from Uttar Pradesh Power Corporation Limited (UPPCL), the state-owned power transmission and distribution utility of Uttar Pradesh, India, was surfaced on cybercrime channels.
Exposed Data Types
6- Names
- Phone numbers
- Physical addresses
- Geographic locations
- Utility account details
- Meter serial numbers
About This Breach
The compromised repository contains 1,353,502 unique postpaid electricity subscriber records. Forensic audit reveals sensitive technical and personal attributes, including consumer full names, paternal names, mobile telephone numbers, physical service addresses, electrical substation identifiers, meter serial numbers, consumer account IDs, and precise geographic GPS coordinates (latitude and longitude).
The combination of utility account numbers, mobile contacts, and physical residence coordinates exposes affected consumers to fraudulent billing extortion, targeted utility phishing scams, and unauthorized location tracking.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
