Page 41 - Banking Finance February 2026

ARTICLE

Why Indian BFSI and

Fintech Firms Are

Becoming Prime

Zakir Hussain Rangwala
Ransomware Targets BD Software Distribution Pvt.Ltd
CEO

Any downtime, even for minutes, can result in major disruptions. Ransomware groups exploit this
dependency by designing attacks that cripple critical systems such as payment gateways,
authentication servers, customer databases, and core banking operations.

I ndia's BFSI and fintech sectors have undergone rapid Another critical factor driving ransomware incidents in the

digital transformation over the past decade, creating
BFSI and fintech domains is the complex and rapidly evolv-
a highly connected financial ecosystem that processes
billions of transactions each day. This surge in digital adop- ing regulatory environment governing data privacy and fi-
nancial compliance. Although India has strengthened its
tion driven by mobile banking, UPI, digital lending, and AI- cybersecurity framework through initiatives like the DPDP
driven financial services has dramatically expanded the at- Act and RBI's risk-mitigation directives, the pace of imple-
tack surface for cybercriminals. mentation and the maturity of security practices vary across
the sector. This creates uneven levels of preparedness, es-
Ransomware groups view financial institutions as particu- pecially in organizations that are scaling quickly or operat-
larly lucrative targets because these organizations handle ing with constrained resources.
sensitive personal, transactional, and identity data that di-
rectly influence national financial stability. Any disruption in In such cases, gaps may appear due to limited cybersecurity
service can lead to widespread customer impact, staffing, budget pressures, or the extensive use of external
reputational damage, and regulatory scrutiny. This pressure vendors and cloud-based services. Threat actors take advan-
increases the likelihood that affected institutions may con- tage of these inconsistencies, frequently probing for soft tar-
sider paying ransom to quickly restore operations. gets to gain initial entry into the broader financial ecosystem.
The rise of interconnected digital platforms ranging from cloud
Additionally, many BFSI organizations still operate with a environments and APIs to open banking systems and embed-
mix of legacy infrastructure and new digital layers, creat- ded finance models has introduced numerous access points
ing security gaps that sophisticated ransomware actors can that can be exploited if not consistently secured.
exploit. As attackers adopt AI-powered intrusion techniques
and automated exploration tools, the Indian financial land- Additionally, supply-chain attacks have grown more sophis-
scape has become a high-value target zone where even a ticated, with ransomware groups compromising service pro-
minor vulnerability can trigger a large-scale breach. viders or technology partners to move laterally across mul-

BANKING FINANCE | FEBRUARY | 2026 | 35