Nearly 4,000 SBI Customer Records Found on Dark Web After Data Leak
SBI has detected 3,897 customer records with personally identifiable information among roughly 375,000 documents that were supposedly obtained on the dark web. The potential data leak includes client IDs, email addresses, mobile numbers, home addresses and banking related details.
On October 21st, the State Bank of India (SBI) announced that it had found 3,897 customer records in data that may have been leaked on the dark web and contained personally identifiable information (PII). To determine the veracity, origin, and scope of the purported exposure, the bank has initiated a comprehensive inquiry.
The biggest lender in the nation got notices regarding the possible exposure on October 16 from its Threat Intelligence Service Provider, the Defence Cyber Agency, and CERT-In, according to an exchange filing. Out of almost 3,75,000 documents found on the dark web, 3,897 contained personally identifiable information (PII), according to an initial investigation.
Hackers Leaked Detailed Information of SBI’s Customers
Among the 375,000 records found on the dark web, 3,897 customer records contained Personally Identifiable Information (PII), according to the SBI's preliminary examination. Customer IDs, email addresses, home addresses, date of birth, gender, registered mobile numbers, branch and CIF identities, and lead IDs were allegedly among the leaked data. Metadata pertaining to loan/lead records and other relevant files were also included. According to SBI, they have taken the necessary steps to address the cyber incident. They have also enlisted the help of an independent cybersecurity agency that is accredited by CERT-In.
Their goal is to evaluate the claimed breach and the threats that it poses to both the bank and its clients. The lender explained that its fundamental business operations, financial performance, and business continuity were unaffected by the incident. In addition, SBI reaffirmed that its essential operations were running smoothly. The authenticity and completeness of the data will be investigated further in the current investigation. In addition, it will evaluate the incident's hazards and identify the possible exposure's source and extent. According to SBI, the necessary corrective and preventative actions are being taken.
Response from SBI
An account that keeps tabs on cybersecurity, CyberPulse56, brought attention to the assertion in a post on X. The group allegedly had 2,722 PDF documents linked to the lender and around 3.8 lakh data entries in CSV format, as informed by the CyberPluse56. In line with relevant regulatory obligations, SBI stated it would keep an eye on the situation and act accordingly. Corrective and preventative actions are being taken in response to the findings of the independent cybersecurity agency's evaluation.
As far as SBI is concerned, this will not significantly affect the bank's core business operations, financial performance, or ability to stay in business. There have been no changes to the way the bank's primary operations are running. The necessary corrective and preventative actions have been put in place after a thorough evaluation. There have been broader concerns about cybersecurity dangers to India's financial sector, and this potential exposure is just one more. Earlier this year, the Reserve Bank of India increased the cybersecurity requirements for commercial banks.
