- Home
- Resources & Insights
- Cybersecurity News & Updates
Cybersecurity news & updates for India
A curated, plain-English digest of regulatory and threat developments that affect Indian organisations, each linked to the primary source.
DPDP: consent-manager phase begins
The second phase under the DPDP Rules, 2025 begins one year after notification, covering registration of consent managers. The bulk of data-fiduciary obligations, including security safeguards and breach notification, follow from 13 May 2027.
Source: PIB backgrounder: DPDP Rules, 2025 notified (Nov 2025)
CERT-In handled 29.44 lakh incidents in 2025
Government data released in January 2026 shows CERT-In handled over 29.44 lakh incidents in 2025 and issued 1,530 alerts, 390 vulnerability notes and 65 advisories.
DPDP Rules, 2025 notified
MeitY notified the Digital Personal Data Protection Rules, 2025 with an 18-month phased rollout. Penalties under the Act reach ₹250 crore for failing to maintain reasonable security safeguards.
Source: PIB backgrounder: DPDP Rules, 2025 notified (Nov 2025)
India's average breach cost hits a record ₹22 crore
IBM's 2025 Cost of a Data Breach study found India's average breach cost rose about 13% to ₹22 crore, with shadow AI among the top three cost drivers.
Source: IBM, Cost of a Data Breach Report 2025 (India findings)
CERT-In 2024 incident count confirmed at 20.41 lakh
A parliamentary reply placed 2024 incidents at 20,41,360, up from 15,92,917 in 2023 and 13,91,457 in 2022.
Summaries are written by Colozal Labs. Always refer to the linked official source for the authoritative text.
Not sure where to start?
Talk to a Colozal Labs specialist. We'll listen first, then recommend only what your risk and budget justify.