Mumbai, October 21 (TNA) The State Bank of India (SBI) has confirmed that customer information may have been exposed on the dark web, with a preliminary review identifying 3,897 records containing personally identifiable information.
The country’s largest lender disclosed the development in a filing to the stock exchanges after examining around 3.75 lakh records reportedly found online. SBI said the investigation is still underway and that it has not yet established the source, authenticity or full extent of the alleged exposure.
What information was exposed?
The potentially exposed data reportedly includes customers’ names, gender, registered mobile numbers, dates of birth, email addresses and residential addresses. It also includes branch details, customer information file identifiers, lead IDs and metadata linked to loan and lead records.
SBI was alerted on October 16 by its threat-intelligence service provider, the Defence Cyber Agency and the Indian Computer Emergency Response Team (CERT-In). The bank subsequently activated its cyber-incident response and containment protocols.
Independent probe ordered
SBI has engaged an independent cybersecurity agency empanelled with CERT-In to investigate the nature and extent of the suspected compromise. The bank said the inquiry would also assess the possible risks to customers and determine whether the data circulating online is complete and genuine.
The lender said appropriate remedial and preventive measures were being implemented as required. It added that the incident had not materially affected its core operations, financial performance or business continuity, and that banking services continued normally.
Customers advised to remain alert
Customers should remain cautious about unsolicited calls, messages or emails seeking one-time passwords, card details, passwords or banking credentials. SBI customers should verify communications through official channels and report suspicious activity to the bank and the national cybercrime reporting system.
The bank’s investigation is continuing, and further details are expected once the forensic assessment determines whether the records represent a confirmed breach of SBI systems or data obtained through another source.