People
Star Health earns a governance grade of B — promoters hold 57.67% with zero pledge and the board carries genuine credentials, but a 2024 data breach exposing 31 million customer health records revealed a material cybersecurity governance gap, and CEO pay surged 74% in a year of underwriting losses.
The People Running This Company
Anand Roy (MD & CEO, age 50) joined Star Health at its founding in 2006, before operations began. He became MD in December 2019 and assumed the sole CEO title in May 2023 when founding chairman V. Jagannathan stepped back. His 20-year institutional depth is the company's biggest management asset. His personal equity of approximately ₹73 crore and 33.6 lakh ESOP options make him genuinely aligned with shareholders — not a hired hand.
Sumir Chadha (WestBridge Capital) is the dominant promoter voice on the board. Harvard MBA, former co-founder of Sequoia Capital India and Goldman Sachs principal. WestBridge's holding is large enough that its incentives point to multi-year value creation rather than a short-term exit.
Utpal Sheth (Rare Enterprises) holds the nominee seat representing Rakesh Jhunjhunwala's investment legacy. Jhunjhunwala was one of Star Health's earliest institutional backers; Sheth has been CEO of Rare Enterprises since 2003 and continues as nominee director after Jhunjhunwala's passing in August 2022.
CEO Total Comp FY25 (₹ Cr)
CEO Personal Stake (%)
CEO ESOP Options (Lakh)
With Star Health Since
The May 2025 elevation of Amitabh Jain (COO) and Himanshu Walia (CMO) to Whole-time Directors meaningfully reduces key-person concentration around Anand Roy. Both are long-tenured Star Health veterans with deep operational knowledge.
What They Get Paid
CEO total pay rose 74% from ₹5.27 crore in FY2024 to ₹9.19 crore in FY2025, reflecting Anand Roy's assumption of full CEO responsibility. The absolute level is modest — less than 0.03% of market cap — and broadly comparable to Indian insurance sector norms. The structure is the real concern: variable pay was just ₹0.11 crore (1.2% of total), meaning compensation is nearly entirely fixed regardless of underwriting profit, combined ratio, or shareholder returns. In FY2025, when the combined ratio was 101.1% and underwriting loss was ₹165 crore, the variable component should have moved materially lower.
Independent director compensation is modest (₹17L–₹48L). Nominee directors from WestBridge and Rare Enterprises receive no disclosed compensation from Star Health — their alignment is through equity, not fees.
Are They Aligned?
The promoter group holds 57.67% at zero pledge — the most important governance fact in this file. WestBridge Capital and Rare Enterprises cannot be forced into distressed selling. Promoter holding edged down modestly from 58.90% (FY2024) to 57.67% (FY2025), within normal variance.
FPI holding fell 11.7 percentage points — from 26.72% to 14.98% — during FY2025. The exit coincides with the data breach crisis (September 2024). Domestic mutual funds and insurance companies absorbed this selling (+7.4pp), suggesting local investors viewed the price dislocation as an entry opportunity.
2024 Data Breach — 31 Million Customers Affected
In August 2024, threat actor "xenZen" exfiltrated 7.24 terabytes of customer data from Star Health's systems — including names, addresses, tax details, medical diagnoses, and health records covering over 31 million policyholders. The hacker distributed data freely through Telegram chatbots. Reuters broke the story on September 20, 2024; Star Health's shares fell 11% within days.
The hacker demanded $68,000 in ransom, addressed directly to the MD and CEO by name. Star Health investigated an alleged role of Chief Security Officer Amarjeet Khanuja — the company stated no wrongdoing was found, though the internal probe continued. Legal action was taken against Telegram and the threat actor.
No IRDAI enforcement action has been publicly disclosed. The episode demonstrates that ISO 27001 certification did not translate into adequate data protection for 31 million sensitive health records — board-level cybersecurity oversight is the unresolved governance question.
Insider activity: No promoter pledges. No disclosed director or KMP buy or sell transactions. The most recent SEBI insider-trading disclosure for STARHEALTH was SETU AIF Trust (an alternate investment fund, not a company insider) acquiring 67,000 shares in June 2025 at ₹474.
Related-party transactions: Rare Enterprises paid Star Health ₹6–16 lakh in insurance premiums and received ₹1–2 lakh in advisory services during FY2025. No material RPTs. Quarterly Audit Committee review confirmed.
ESOP: 63.52 lakh options outstanding (1.1% potential dilution — modest). The CEO holds 33.6 lakh options (53% of total pool); CFO holds 12.1 lakh; CIO holds 7.4 lakh. Exercise prices range ₹142–₹719; at the current price of approximately ₹520, the most recent tranches are near or slightly underwater.
Skin-in-the-Game Score (1–10)
Score rationale: Promoters at 57.67% with zero pledge (+3 pts). CEO holds approximately ₹73 crore in personal equity plus 33.6 lakh options (+2 pts). Zero material RPTs and a clean insider-trading record (+2 pts). Deductions for the 2024 data breach revealing a cybersecurity governance gap (-1 pt) and near-absence of performance-linked variable pay (-1 pt). Score: 7/10.
Board Quality
The board passes the formal 50% independence threshold (5 of 9 directors independent). Quality within the independent bloc is above the Indian average: a former SEBI enforcement head, two former IAS secretaries (one currently serving as SEBI's Independent External Monitor), a Big4 CA chairing Audit, and a brand specialist. The Audit Committee logged 100% attendance across all four FY2025 meetings.
The structural weakness: three of nine directors are PE nominee directors aligned with the controlling shareholder. Real independence — the ability to challenge management without sponsor pressure — is approximately 5 of 9 seats, adequate but not exceptional.
Missing expertise: No medical professional, physician, or public health specialist sits on the board of a company underwriting ₹20,000+ crore in annual health premiums. The Appointed Actuary attends board meetings but is not a director. This is a governance gap for a health-specific insurer.
The Verdict
Governance Grade: B
Skin-in-the-Game Score (/ 10)
Strongest positives: Promoter alignment is genuine — 57.67% at zero pledge, with WestBridge's institutional logic pointing to multi-year value creation. The CEO is a founding-era insider with meaningful personal equity and 20 years of institutional knowledge. The board carries credentialed independent directors including a former SEBI regulator. No material related-party transactions. Succession depth improved in May 2025 with the elevation of two long-tenured executives to Whole-time Director.
Real concerns: The 2024 data breach is the dominant governance event: 31 million health records exposed, with cybersecurity governance failing below the board's line of sight. CEO pay up 74% in a year of underwriting losses — with variable pay at just 1.2% of total compensation — weakens pay-for-performance credibility. The PE nominee bloc (3/9 board seats) means the board's primary lens for challenging management is financial return, not necessarily health outcome quality or minority shareholder interests.
Upgrade trigger: Independent board-level technology audit post-breach, with CISO reporting directly to the Audit Committee, plus a meaningful restructuring of variable pay explicitly tied to combined ratio and ROE targets.
Downgrade trigger: Any promoter share pledge, material insider selling ahead of disappointing results, or formal IRDAI enforcement action related to the data breach.