Startup Deep Dive : Chtrbox — from a 2019 data breach to India’s first listed influencer-marketing IPO

In May 2019, a security researcher found an unprotected database, run by a small Mumbai marketing firm, holding contact records tied to millions of Instagram accounts. Six years later that same firm, Chtrbox, listed on the SME platform of the BSE after an initial public offering that was subscribed about 52 times at the top of its price band — by the company’s account, the first influencer-marketing business in India to go public.

The legal entity is Chatterbox Technologies Limited, incorporated on 3 March 2016 and registered with the Registrar of Companies, Mumbai. It sells the same thing today that it sold before the breach: access to social-media creators, wrapped in software and a services team. What changed is who owns it, how it earns, and the fact that anyone can now read its audited accounts. This is a deep dive into a company that turned a reputational near-death into a filing prospectus.

Quick facts

What they do

Chtrbox connects brands with social-media creators and runs the campaigns that follow. It positions itself as data-led rather than a pure services shop: technology to shortlist creators by reach, relevance and audience fit, then a team to brief, execute and measure. The customer is the brand or its media agency; the supply side is the pool of creators the platform can activate.

• Core offering: creator discovery, campaign execution, talent and creator management, and live performance tracking, as described in the IPO prospectus.
• Scale claim: the company states a network of more than 300,000 creators (company-stated, YourStory). The prospectus separately frames the track record as over a thousand campaigns run since 2016.
• Footprint: the prospectus lists operations across India, Singapore, the UAE, the USA and the UK.
• Ownership: since 2021 it has been a subsidiary of QYOU Media Inc., a media company then listed in Canada, which contributes about 30% of QYOU’s consolidated results (company-stated, H1 FY2025-26 release).

The origin

Chtrbox came out of a pattern its founder had already lived. Pranay Swarup had co-founded LetsIntern.com in 2010, a platform matching college students with internships, which he ran until a 2016 exit. In that business he had leaned on campus-based ambassadors to reach students for brands, and he came away convinced that the informal economy of people-with-audiences was about to become a formal marketing channel.

The bet was timing. In 2016 Indian brands were still treating influencer spend as an afterthought, negotiated one creator at a time over direct messages, with no standard way to price reach or prove results. Swarup’s insight was that the missing layer was not more creators but the software and data to sort them — to tell a brand which account actually moved its audience, and to run the campaign end to end rather than just introduce the two sides. Chatterbox Technologies was incorporated in March 2016 to build exactly that layer.

The struggle years

The defining crisis arrived in May 2019, and it was the kind that ends companies. A security researcher, Anurag Sen, found a database on a misconfigured Amazon Web Services instance and passed it to TechCrunch, which reported on 20 May 2019 that it contained records tied to millions of Instagram accounts — profile data, follower counts, and in many cases private contact information such as email addresses and phone numbers. Multiple outlets put the figure at about 49 million records, and the trail led to Chtrbox.

The account of what happened is contested, and both sides matter:

• Discovery and scale: TechCrunch and several security outlets reported roughly 49 million records exposed; the database was pulled offline shortly after TechCrunch contacted the company (TechCrunch, May 2019).
• The company’s version: Chtrbox disputed the scale, saying no more than about 350,000 influencers were affected and that the database was exposed for only about 72 hours (as reported by Business Today and others, May 2019).
• The researcher’s version: the exposed instance was first detected on the scanning service Shodan on 14 May, implying a longer window than the company described (TechCrunch, May 2019).

The second struggle was structural and quieter. As an independent Indian startup, Chtrbox was competing in a category with low barriers to entry, thin margins on pass-through creator fees, and no public profile beyond the breach headlines. Building durable revenue in that environment — enough to be worth acquiring, let alone listing — took years, and the early profit-and-loss shows it: profit after tax was just ₹1.28 crore in FY23 before the business scaled, per the IPO prospectus.

The turning point

The turn was ownership. In 2021 QYOU Media Inc. — a media company that had built a large short-video and creator business in India — agreed to buy Chtrbox, and the deal closed on 15 June 2021 with QYOU acquiring about 97% of Chatterbox Technologies Private Limited. The structure was performance-linked rather than a single cheque, which tells you how the buyer thought about the risk.

The numbers on each side of that deal, from QYOU’s own disclosures:

• Structure: an initial price set on a multiple of EBITDA for the year ended 31 March 2021, plus a three-year earn-out tied to EBITDA for the twelve-month periods ending 31 March 2022, 2023 and 2024 (QYOU Media disclosures, 2021–2022).
• Consideration components (US dollars): cash of $2,630,345, a working-capital adjustment of $106,837, a 2021 EBITDA adjustment of ($68,103), and contingent consideration of $2,552,135 — a total in the low single-digit millions of dollars (QYOU Media SEC/press filings).

What the acquisition changed was capital and horizon. Backed by a listed parent, Chtrbox could invest through the earn-out period instead of surviving quarter to quarter, and the results followed: total income roughly climbed from ₹40.20 crore in FY23 to ₹59.45 crore in FY25, with profit after tax rising from ₹1.28 crore to ₹8.86 crore over the same window (IPO prospectus). That record is what made the eventual listing possible.

The money behind it

Chtrbox’s capital story is unusual for an Indian startup: it did not raise a long ladder of venture rounds and then chase a large private valuation. Instead it took a modest seed start, was absorbed by a strategic buyer, and then went public itself.

• Seed stage (2016): an early seed round as an independent startup; the amount was not publicly disclosed.
• Strategic buyer (2021): QYOU Media Inc. acquired about 97% of the company, closing 15 June 2021, with total consideration in the low single-digit millions of dollars split between upfront cash and a multi-year EBITDA-linked earn-out (QYOU Media filings).
• IPO (2025): a fresh-issue-led SME IPO on the BSE. Price band ₹110–₹115, final issue price ₹115, total issue about ₹43 crore (37,27,200 shares), of which roughly ₹41 crore was a fresh issue. Bidding ran 25–29 September 2025; the shares listed on 3 October 2025 (chittorgarh IPO data; company release).
• Demand and proceeds: the issue was oversubscribed about 52 times at the top of the band, and the company reported gross proceeds of about ₹42.86 crore, roughly $4.5 million (company release, October 2025).

Ownership after the IPO stayed firmly with the promoters: QYOU Media Inc. and Rajnandan Mishra together held 60.39%, down from 82% before the offer (IPO prospectus). International gloss uses one rate: $1 ≈ ₹96.0 as of 18 September 2026 (Trading Economics).

How it makes money

The model is part media agency, part platform, and the distinction shapes the margin. Brands pay Chtrbox to plan and run influencer campaigns; Chtrbox pays creators; the company keeps the spread plus fees for strategy, technology and reporting. The part people get wrong is assuming the headline campaign budget is revenue — much of it is pass-through to creators, so the economics live in the margin the company retains, not the gross spend it handles.

• Money in: campaign fees from brands and agencies, spanning creator sourcing, content, execution and analytics.
• Money out: the largest cost is creator payouts, followed by the people who service accounts and build the technology.
• Where the margin sits: in the retained fee and the efficiency of matching the right creators, not in the total budget passing through.
• Evidence it scaled profitably: EBITDA moved from ₹1.38 crore in FY23 to ₹12.16 crore in FY25, while profit after tax reached ₹8.86 crore in FY25 (IPO prospectus) — a sign the retained margin grew faster than the pass-through.
• Recent trajectory: in H1 FY2025-26 (six months to 30 September 2025) revenue from operations was ₹35.98 crore, up 33.4% year on year, with profit after tax of ₹4.70 crore, up 25.2%, and EPS of ₹4.51 (company release, November 2025).

The numbers

Three years of audited figures from the IPO prospectus show the pattern: revenue grew steadily, but profit jumped once — between FY23 and FY24 — as the business moved past its low-margin phase.

• Revenue growth: total income rose about 47.9% from FY23 to FY25, but the pace slowed sharply — up 37.7% in FY24, then only 7.4% in FY25 (IPO prospectus).
• Profit inflection: PAT multiplied roughly 6.7 times between FY23 and FY24, then edged up 3.9% in FY25, so the profit story is one big step rather than a smooth curve.
• Balance sheet: net worth roughly tripled from ₹8.25 crore in FY23 to ₹25.64 crore in FY25, before IPO proceeds were added.
• Post-listing momentum: H1 FY2025-26 revenue of ₹35.98 crore already equals about 60% of full-year FY25 income, suggesting a stronger FY26 if the second half holds (company release).

Where the money comes from

Two splits are worth reading together — geography and the parent-company lens — and each carries a surprise.

• Geography: the prospectus lists operations across India, Singapore, the UAE, the USA and the UK, so the revenue base is not purely domestic even though India is the home market.
• Parent-company share: Chtrbox has historically contributed about 30% of QYOU Media’s consolidated results (company-stated), meaning a single Indian influencer business is a material third of a cross-border media group.
• Use of IPO proceeds — where the new money is pointed (₹ crore, from the prospectus): capital expenditure for the existing business 11.07; a new office and studio 7.14; brand building 5.02; working capital 6.33; general corporate purposes 5.67; issue expenses 7.64.

The surprise is in that last list. For a company that markets itself as a data and technology platform, the largest planned uses of cash are physical and brand-building — an office, a studio, and marketing spend — rather than software. It hints that the business is still, in practice, a people-and-production operation with a data layer on top, not a pure software platform.

The risks

• Client and platform concentration risk: the model depends on brand budgets and on third-party social platforms (chiefly Instagram and YouTube) whose algorithm and policy changes can reset the value of a creator overnight. Chtrbox does not own the audience; it rents access to it, so a platform rule change or an ad-budget pullback flows straight into revenue.
• Trust and data-governance risk: the 2019 breach showed how quickly a data mishap becomes the brand’s headline. A firm whose core asset is contact and performance data on creators carries an ongoing security and privacy exposure, and India’s tightening data-protection regime raises the cost of any repeat.
• Market and liquidity risk for shareholders: this is a small SME-platform listing, where trading is thin and prices move hard. As of a BSE quote captured in this research in September 2026, the stock changed hands near ₹78, below its ₹115 issue price — a reminder that the 52-times subscription at listing did not translate into a durable premium.
• Growth-durability risk: the profit inflection was a single step between FY23 and FY24; FY25 income grew only 7.4%. The half-year to September 2025 reaccelerated to 33.4%, but sustaining that after a low-single-digit revenue year is unproven.

The takeaway

The transferable lesson is about survival economics, not marketing. Chtrbox’s most dangerous moment was reputational, not financial — a breach that could have made every brand walk away. What carried it through was not a clever apology but the boring work of building a business someone wanted to own: a strategic buyer in 2021 who paid partly in cash and partly on future EBITDA, then three years of proving that the numbers were real. The IPO in 2025 was the receipt for that patience, not the achievement itself. For founders, the point is that a crisis is survived on the strength of the underlying model, and that being acquired can be a bridge to independence rather than the end of the road.

Frequently asked questions

What is Chtrbox and what does it do?

Chtrbox is the brand of Chatterbox Technologies Limited, a Mumbai-based influencer and digital marketing company incorporated in March 2016. It connects brands with social-media creators and runs the resulting campaigns end to end — discovery, execution, talent management and performance tracking.

Who founded Chtrbox and who runs it now?

It was founded by Pranay Swarup, who had earlier co-founded the internships platform LetsIntern.com. Since QYOU Media Inc. acquired the company in 2021, it has been led by Rajnandan “Raj” Mishra as Founder, CEO and Managing Director, with QYOU Media as the parent and co-promoter.

Is Chtrbox a listed company?

Yes. Chatterbox Technologies Limited listed on the SME platform of BSE Limited on 3 October 2025, after an IPO priced at ₹115 per share that raised about ₹42.86 crore and was oversubscribed roughly 52 times. The company describes itself as the first listed influencer-marketing business in India.

What was the 2019 Chtrbox data breach?

In May 2019, TechCrunch reported that a misconfigured database linked to Chtrbox had exposed records tied to millions of Instagram accounts, with figures around 49 million records widely cited. Chtrbox disputed the scale, saying no more than about 350,000 influencers were affected and that the database was exposed for roughly 72 hours; the company took it offline after being contacted.

How much money does Chtrbox make?

Per its IPO prospectus, total income was ₹59.45 crore in FY25 (year ended 31 March 2025) with profit after tax of ₹8.86 crore. In the first half of FY2025-26, revenue from operations was ₹35.98 crore, up 33.4% year on year, with profit after tax of ₹4.70 crore.

Sources

Figures are as of September 2026. Currency converted at $1 ≈ ₹96.0 as of 18 September 2026 (Trading Economics).

• TechCrunch — “Millions of Instagram influencers had their contact data scraped and exposed” (May 2019)
• Business Today — Instagram data breach: Mumbai-based Chtrbox leaks private data of social media influencers (May 2019)
• Dark Reading / SC Media — 49 million Instagram influencer records exposed in open database (May 2019)
• QYOU Media Inc. — press releases and SEC filings on the acquisition of Chtrbox / Chatterbox Technologies (2021–2022)
• PR Newswire / Newswire.ca — QYOU Media Inc. to acquire and completes closing to acquire Chtrbox (June 2021)
• Chittorgarh — Chatterbox Technologies IPO details and audited FY23–FY25 financials (September–October 2025)
• Company release via Exchange4media and BuzzInContent — Chtrbox H1 FY2025-26 results and IPO listing (October–November 2025)
• Barchart / PR Newswire — QYOU Media subsidiary Chatterbox Technologies reports record H1 FY2025-26 results (November 2025)
• YourStory — Chtrbox company profile and creator-network figures
• Trading Economics — USD/INR reference rate (September 2026)

Found an error? Write to us and we’ll correct it in the open, dated, on the piece.