- SBI confirms data breach impacting thousands of customers.
- 3,897 customer records found exposed on the dark web.
- Personal details and loan records were compromised in a cyberattack.
State Bank of India (SBI) experienced a data breach with 3,897 customer records found exposed on the dark web, India’s largest lender said on Wednesday, confirming the reports of a cyber attack. Customer personal information, including names, contact numbers, dates of birth, email, residential addresses, and loan records, was exposed in the data breach, as per the preliminary analysis.
The bank said in an exchange filing that in a preliminary analysis of around 3,75,000 records available on the dark web, it identified 3,897 customer records containing personally identifiable information (PII). However, the development did not impact its core business operations and business performance.
What Information Was Exposed In SBI’s Data Breach
As reported, the exposed data are:
Data Category | Specific Exposed Fields |
|---|---|
Personal Details | Names, Dates of birth, Gender |
Contact Information | Registered mobile numbers, Email addresses, Residential addresses |
Account & Banking Identifiers | Branch identifiers, CIF identifiers, Lead IDs |
Financial & Record Metadata | Metadata associated with loan/lead records, Other related files |
Investigation To Be Done
SBI said it has activated its cyber independent response and control protocols and has engaged an independent cybersecurity firm, which is part of the CERT, to conduct a comprehensive assessment and investigation into the nature and scope of the alleged compromise.
A detailed investigation is underway to ascertain the authenticity and completeness of the leaked information, identify its potential source and scope, and assess the risks associated with it.
Recommended For You
However, the bank said that the incident will not have a material impact on its core business operations, financial performance or business continuity. The bank said that core banking operations have continued as usual without any disruption.
Also Read: Middle East Tensions: Experts Warn Of Costlier Everyday Goods As Crude Oil Hits 5-Month High
Siriusim Claimed Cyberattack
Earlier, an unidentified hacker group, ‘Siriusim ’, claimed to have obtained confidential information including personal details, loan applications and account opening documents of SBI’s customers. This claim was prominently mentioned in a post by CyberPulse56, a cybersecurity monitoring account, on the social media platform X.
According to the post, the group is said to have 3.75 lakh CSV-format data entries and 2,722 PDF documents related to the country's largest public sector bank.