State Bank of India Investigates Dark Web Data Breach
India's largest lender, State Bank of India, launched a probe after 3,897 customer records, including personal and loan details, appeared online.
SBI Launches Data Breach Investigation
State Bank of India (SBI), the largest lender in India, is currently investigating a suspected data breach. This follows the appearance of 3,897 customer records on the dark web, containing sensitive personal information. SBI confirmed its inquiry on 21 October, after reviewing approximately 375,000 records found online.
Preliminary assessments identified exposed data such as customer names, mobile numbers, birth dates, gender, email and residential addresses. The information also included internal identifiers like branch codes, Customer Information File (CIF) identifiers, and details linked to loan applications.
Details of Exposed Information and Initial Response
The exposed data extends beyond basic personal details to include specific financial identifiers. These encompass lead IDs and metadata associated with various loan and lead records, indicating a comprehensive exposure of customer engagement with the bank. SBI first received alerts regarding this potential compromise on 16 October.
These warnings came from its dedicated threat intelligence provider, alongside the Defence Cyber Agency and the Indian Computer Emergency Response Team (CERT-In).
Comprehensive Cybersecurity Protocols Activated
Following the alerts, SBI immediately activated its cybersecurity incident response and containment protocols. The bank also appointed an independent cybersecurity agency, empanelled by CERT-In, to conduct a thorough investigation. This comprehensive assessment aims to verify the authenticity and completeness of the leaked information.
Investigators will also work to pinpoint the source of the breach and determine its full scope, evaluating potential risks to both customers and the bank itself.
Despite the incident, SBI has stated that its core business operations, financial performance, and business continuity remain unaffected. This assurance comes amidst a period of heightened cybersecurity threats targeting financial institutions across India, coupled with increased regulatory scrutiny over data protection practices.
The ongoing investigation will inform any necessary enhancements to SBI's security infrastructure, aiming to mitigate future risks for its extensive customer base in a critical market.
This article is journalism, not investment advice; consult a licensed professional before making financial decisions. Market data is indicative, may be delayed, and should be verified with your broker or exchange before use.
Comments.
Comments are moderated. We remove what is unlawful, abusive or off-topic, and and you remain responsible for what you post.
Reader comments open soon. Until then, corrections and responses go to our newsroom, and we publish what we get wrong on Corrections.