SBI Faces Data Breach Claims: Hacker Group Allegedly Exposes 375,000 Records
An unidentified hacker group claims to have accessed sensitive customer data from SBI, raising cybersecurity concerns.
Hacker group 'Siriusim' claims to have obtained 375,000 customer records from SBI.
The authenticity of the data and its source remain unverified.
Cybersecurity incidents have recently affected multiple Indian financial institutions.
A hacker group known as 'Siriusim' has reportedly claimed to have accessed sensitive customer data from the State Bank of India (SBI). The group alleges that it possesses 375,000 entries in CSV format and 2,722 PDF documents that include personal information, loan applications, and account-opening documents. This claim was highlighted by the cybersecurity monitoring account CyberPulse56 on social media, which first reported the breach on October 16.
The dataset purportedly contains a range of personal customer information, including residential addresses and supporting documents related to loan applications. However, CyberPulse56 has cautioned that the authenticity and origin of the data have not been independently verified. Moreover, it remains unclear how many individual SBI customers might be affected by this alleged breach.
As of October 20, SBI had not responded to inquiries regarding the claims. CyberPulse56 warned that if the dataset is genuine, the exposed information could be exploited for identity theft, financial fraud, and phishing attacks. This incident comes at a time when cybersecurity threats are increasingly targeting Indian financial institutions, with recent reports indicating that around 20 banks and fintech firms have faced cyberattacks.
The Indian Computer Emergency Response Team (CERT-In) had previously issued advisories warning financial institutions about potential cyber threats, particularly those involving compromised credentials. The Reserve Bank of India (RBI) has also tightened cybersecurity regulations for banks, requiring them to report incidents promptly and implement robust security measures. SBI asserts that its digital banking platforms utilize various safeguards against unauthorized access, advising customers to remain vigilant about their personal information.
The situation remains fluid as the authenticity of the claims made by Siriusim is yet to be established. Stakeholders in the banking sector are urged to monitor developments closely, as the implications of such data breaches can be far-reaching, affecting customer trust and the overall security landscape in the financial sector.
