KiranaPro, a Bengaluru-based grocery ordering startup, lost access to its production infrastructure after its Amazon Web Services account and GitHub repositories were deleted. The company placed the deletion on 26 May 2025 and went public with the incident in early June.
Co-founder and chief executive Deepak Ravindran initially described it as an internal breach carried out by a trusted former employee, and publicly pointed to the individual's profile. He told TechCrunch that the evidence amounted to emails from GitHub identifying the former employee's username as the account that performed the deletion, and acknowledged that the company had never deactivated that person's access after they left. He also said he could not rule out that the account had been compromised by an outsider, and confirmed that no full forensic investigation had been conducted.
Reporting put the company at roughly 55,000 customers and about 2,000 orders a day across dozens of Indian cities. Order records, customer addresses and payment details were among the data held in the deleted systems. Ravindran said customer data stored in AWS had not been accessed by any third party, a claim the company had not independently verified.
KiranaPro restored its code from an employee's local backup and regained access to AWS. It said it intended to file a police complaint and to tighten internal access controls.