business
SBI identifies 3,897 customer records leaked on dark web
State Bank of India identified 3,897 customer records leaked on the dark web.
Key points
- SBI identified 3,897 customer records with personally identifiable information after examining 3,75,000 records on the dark web.
- The exposed data reportedly includes names, dates of birth, mobile numbers, email IDs, home addresses, and CIF numbers.
- SBI stated the incident has no material impact on its core business operations, financial performance, or business continuity.
Why it matters. Leaked personal information could fuel targeted fraud, social engineering, and potentially further attacks.
State Bank of India identified 3,897 customer records among 375,000 leaked on the dark web. The exposed data includes mobile numbers, addresses, dates of birth and loan-related details. The Defence Cyber Agency and Computer Emergency Response Team (CERT-In) alerted the bank to the breach. SBI claims its financial performance and operations remain unaffected while it investigates the exposure source.
Latest updates
SBI identifies 3,897 customer records leaked on dark web
SBI confirmed that 3,897 customer records containing personal information were identified in a larger leak of approximately 375,000 records on the dark web. The exposed data includes mobile numbers, residential addresses, dates of birth, and loan-related details. The bank stated that its overall operations and financial performance remain unaffected by the breach. The incident highlights growing systemic cybersecurity risks for major financial institutions.
SBI confirms data leak involving 3,897 customer records in preliminary analysis
SBI said a detailed investigation was required to establish the authenticity and completeness of the exposed data. State Bank of India (SBI) on Wednesday said a preliminary analysis identified 3,897 customer records containing personally identifiable information in data suspected to have been exposed on the dark web.The bank has initiated a detailed investigation into the incident, news agency ANI reported.SBI said it was alerted to the suspected exposure of customer data on the dark web through communications received on October 16 from its Threat Intelligence Service Provider, the Defence Cyber Agency and CERT-In, the report further added.The data reportedly contained a range of customer details, including names, dates of birth, gender, registered mobile numbers, email IDs and home addresses.It also included branch details, customer information file (CIF) numbers, lead IDs, and metadata linked to loan and lead records, along with other related files.Also Read: SBI raises concerns over proposed FCRA asset rules, says ‘clarity required’As part of its preliminary analysis, the bank examined around 3,75,000 records found on the dark web and identified 3,897 customer records containing personally identifiable information (PII).SBI activates cyber response protocolsThe bank said it has activated its cyber incident response and containment protocols promptly after receiving the aler.