A shipbuilding company has been accused of defrauding India's largest state-run bank and 27 other financial institutions of over $3 billion, the country's top investigative agency said, in what would be its biggest-ever bank fraud.
The Central Bureau of Investigation (CBI) -- India's federal investigative agency -- said in a statement that ABG Shipyard had duped 28 banks out of 228.42 billion rupees ($3 billion).
The alleged theft by the Gujarat-based shipbuilder surpasses the $2 billion jeweller Nirav Modi was accused of cheating Indian banks out of in 2018, so far the country's largest known bank fraud.
Private lender ICICI Bank was ABG's biggest victim, losing more than $900 million, according to a forensic audit by Ernst & Young released at the weekend by the State Bank of India, another of its lenders.
State-run IDBI Bank -- owned by IPO-bound insurer LIC -- was next with nearly $500 million, the document said, followed by the State Bank of India (SBI) itself -- the country's biggest state-owned lender -- on almost $400 million.
In all, the Indian taxpayer lost $2 billion to the scheme, according to the audit report figures.
The CBI said the company diverted and misappropriated funds between 2012 and 2017 -- even as its lenders worked to resuscitate the ailing firm and save it from liquidation.
The SBI filed a police complaint against ABG Shipyard, its overseas subsidiary, five company directors and "unknown public servant(s) & private person(s)".
The CBI raided 13 locations including company offices and the directors' homes on Saturday, it said, "which led to recovery of incriminating documents", and further investigation is ongoing.
ABG Shipyard first defaulted on loan payments in 2013 and was named as one of India's 12 biggest defaulters when the country introduced its first bankruptcy law in 2016.
The firm was finally ordered liquidated three years later, but four separate auctions failed to find buyers for its assets and it has been trying to sell them privately for the last two years.
Local councils now face four “nationally significant” cyber attacks weekly, putting essential services at risk.
Cyber-attacks cost UK SMEs £3.4 billion annually, with the North West particularly affected.
Experts recommend proactive measures including supplier monitoring, threat intelligence, and an “assume breach” mindset.
Cyber threats escalate
Britain’s local authorities are facing an unprecedented surge in cyber threats, with the National Cyber Security Centre reporting that councils confront four “nationally significant” cyber attacks every week. The escalation comes as organisations are urged to take concrete action, with new toolkits and free cyber insurance through the NCSC Cyber Essentials scheme to help secure their foundations.
Recent attacks on major retailers including Marks & Spencer, Co-op and Jaguar Land Rover have demonstrated the devastating impact of cyber threats on critical operations. Yet councils remain equally vulnerable, with a single successful attack capable of rendering essential public services inaccessible to millions of citizens.
The stakes are extraordinarily high. When councils fall victim to cyber attacks, citizens cannot access housing benefits, pay council tax or retrieve crucial information. Simultaneously, staff are locked out of email systems and case management tools, halting service delivery across social care, police liaison and NHS coordination.
Call for cyber resilience
According to Vodafone and WPI Strategy’s Securing Success: The Role of Cybersecurity in SME Growth report, cyber-attacks are costing UK small and medium-sized enterprises an estimated £3.4 billion annually in lost revenue. Over a quarter of SMEs surveyed stated that a single attack averaging £6,940 could force them out of business entirely. This financial impact is particularly acute in the North West, where attacks cost businesses nearly £5,000 more than the national average.
Renata Vincoletto, CISO at Civica, emphasises that councils need not wait for legislation to strengthen their cyber resilience. She outlines five immediate priorities: employing third-party continuous monitoring tools to track supplier security compliance; subscribing to threat intelligence feeds from the NCSC and sector experts; engaging with regional cyber clusters supported by the Department for Digital, Culture, Media and Sport and the UK Cyber Cluster Collaboration ( UKC3) establishing standardised incident reporting processes aligned with NCSC frameworks; and adopting an “assume breach” mindset to stay vigilant against inevitable threats.
“Cyber resilience is not a single project or policy it’s a culture of preparedness,” Vincoletto states. “Every small step taken today reduces the impact of tomorrow’s inevitable attack.”
By clicking the 'Subscribe’, you agree to receive our newsletter, marketing communications and industry
partners/sponsors sharing promotional product information via email and print communication from Garavi Gujarat
Publications Ltd and subsidiaries. You have the right to withdraw your consent at any time by clicking the
unsubscribe link in our emails. We will use your email address to personalize our communications and send you
relevant offers. Your data will be stored up to 30 days after unsubscribing.
Contact us at data@amg.biz to see how we manage and store your data.