SBI Investigates 3,897 Customer Records Exposed on Dark Web
The State Bank of India is probing a significant data breach involving nearly 4,000 customer records found online.
SBI identified 3,897 records with personally identifiable information on the dark web.
The bank activated its cyber incident response protocols and engaged cybersecurity experts.
No material impact on SBI's business operations has been reported despite the breach.
In a concerning development, the State Bank of India (SBI) announced on Wednesday that it has discovered 3,897 customer records containing personally identifiable information (PII) that may have been compromised on the dark web. This revelation has prompted the bank to initiate a thorough investigation to verify the authenticity, source, and extent of this data exposure.
The alerts regarding the potential data breach were received on October 16 from various cybersecurity entities, including the Defence Cyber Agency and CERT-In. A preliminary review of around 375,000 records available on the dark web led to the identification of the 3,897 records containing sensitive customer information, such as registered mobile numbers, names, dates of birth, email addresses, and residential addresses, as well as branch and CIF identifiers.
SBI has activated its cyber incident response protocols and is collaborating with an independent cybersecurity agency to assess the situation. The bank emphasized that the incident has not adversely affected its core business operations or financial performance, assuring customers that its essential functions continue to run smoothly.
The investigation will focus on determining the authenticity of the exposed data, identifying its source, and evaluating the associated risks. The bank has stated that it is implementing necessary remedial and preventive measures in response to the incident. This breach follows claims by a hacker group named 'Siriusim', which alleged possession of confidential customer information linked to SBI, including loan applications and account-opening documents.
Despite the breach, SBI reassured stakeholders that there has been no disruption to its business operations. The bank remains vigilant and will continue monitoring the situation closely, adhering to regulatory requirements as it works with cybersecurity experts to mitigate any potential risks. This incident highlights ongoing concerns regarding cybersecurity within India's financial sector, prompting increased scrutiny and regulatory measures from authorities like the Reserve Bank of India earlier this year.
