SBI reports data leak, 3,897 customer records exposed

Spread the news

Bank launches probe after personal details surface on dark web

Chandigarh: The State Bank of India (SBI) reported a suspected cyber incident involving the exposure of 3,897 customer records on the dark web after receiving alerts on October 16 from its threat intelligence service provider, the Defence Cyber Agency and the Indian Computer Emergency Response Team (CERT-In).

In a filing with stock exchanges, the bank said a preliminary examination of around 3.75 lakh records identified online had revealed 3,897 records containing personally identifiable information.

The data reportedly included customers’ names, registered mobile numbers, dates of birth, gender, email addresses and residential addresses. It also contained branch details, customer identification numbers, and information linked to loan records and leads.

SBI said the incident had not affected its core banking operations, financial performance or business continuity. The bank added that it had activated its cyber incident response and containment protocols following the alerts.

A detailed investigation was required to establish the authenticity and completeness of the exposed records, trace their possible source and assess the risks to customers and the bank, SBI said.

The bank said it was monitoring the situation and would take appropriate measures as the investigation continued, in accordance with applicable regulatory requirements.