6 days ago

SBI confirms data leak of 3,897 customer records on dark web

State Bank of India (SBI) on Wednesday confirmed a cyberattack that led to the exposure of 3,897 customer records containing personal and loan-related information but added that its core operations and financial performance were not affected.

The country’s largest public sector lender flagged that the breach resulted in information including registered mobile numbers, dates of birth, email IDs and residential addresses being put on the dark web. The lender has initiated a cyber incident response and engaged an independent cybersecurity agency to investigate the cyberattack, SBI said in a regulatory update.

SBI received communications on October 16 from its Threat Intelligence Service Provider, the Defence Cyber Agency and the Indian Computer Emergency Response Team (CERT-In) regarding an alert about the suspected exposure of customer data on the dark web.

A preliminary analysis of about 3,75,000 records available on the dark web identified 3,897 customer records containing Personally Identifiable Information (PII). The exposed information included customers’ names, gender, registered mobile numbers, dates of birth, email addresses, residential addresses, branch and Customer Information File (CIF) identifiers, lead IDs, and metadata associated with loan and lead records and other related files.

SBI said a detailed investigation was necessary to establish the authenticity and completeness of the exposed data, determine the potential source and extent of the exposure, and assess the associated risks to customers and the bank.

The lender added that it had engaged an independent CERT-In-empanelled cybersecurity agency to conduct a comprehensive assessment and investigate the nature and extent of the alleged compromise.

“We wish to submit that this does not have any material impact on bank’s core business operations, financial performance or business continuity,” it added.

On Tuesday, various media firms had reported about the data breach.

If you spotted a mistake or have feedback on this story, write to us at editor@newsassociate.com. Email us your press releases on the same ID.