State Bank of India identifies 3,897 customer records leaked on dark web

State Bank of India data breach dark web cybersecurity personal data leak

State Bank of India (SBI) has confirmed a cyber incident involving the exposure of 3,897 customer records on the dark web. The records were identified during a preliminary analysis of approximately 375,000 records found online.

The exposed data includes sensitive personally identifiable information such as customer names, registered mobile numbers, dates of birth, email addresses, residential addresses, gender, branch details, and Customer Information File (CIF) identifiers. Additionally, metadata related to loans and lead records was reportedly included.

SBI stated that its core banking operations, financial position, and business continuity have not been adversely affected, and emphasized that all customer account balances and funds remain safe. The bank has individually notified affected customers via email and WhatsApp.

The bank received alerts regarding the leak on October 16 from its threat intelligence provider, the Defence Cyber Agency, and the Indian Computer Emergency Response Team (CERT-In). SBI has activated its cyber incident response protocols and engaged an independent, CERT-In-empanelled security agency to investigate the origin and extent of the breach.

Entities

A. A. Rahim · A.A. Rahim · CERT-In · CPI(M) · Defence Cyber Agency · Indian Computer Emergency Response Team · Nirmala Sitharaman · State Bank of India

Claims

What the coverage asserts, and how many sources carry each claim.

[● 12 SOURCES] Exposed data includes names, mobile numbers, dates of birth, email addresses, and residential addresses. www.pratahkal.com · taxguru.in · www.bhaskarhindi.com · bhaskarlive.in · samacharnama.com · +7 more
[● 13 SOURCES] The identified records were part of a larger set of approximately 375,000 records on the dark web. web3montenegro.me · taxguru.in · www.pratahkal.com · bhaskarlive.in · samacharnama.com · +8 more
[● 11 SOURCES] SBI has engaged an independent CERT-In-empanelled security agency to investigate the incident. www.pratahkal.com · taxguru.in · www.bhaskarhindi.com · bhaskarlive.in · samacharnama.com · +6 more
[● 3 SOURCES] SBI stated that its core banking operations and business continuity have not been adversely affected. www.pratahkal.com · taxguru.in · www.bhaskarhindi.com
[● 13 SOURCES] SBI identified 3,897 customer records containing personal information on the dark web. www.pratahkal.com · web3montenegro.me · taxguru.in · www.bhaskarhindi.com · bhaskarlive.in · +8 more
[● 10 SOURCES] The bank received alerts about the leak on October 16. www.pratahkal.com · taxguru.in · www.bhaskarhindi.com · bhaskarlive.in · www.ibc24.in · +5 more
[● 3 SOURCES] Rajya Sabha MP A.A. Rahim requested an independent investigation from Finance Minister Nirmala Sitharaman. www.pratahkal.com · www.bhaskarhindi.com
[● 5 SOURCES] The bank has not yet determined the origin of the leaked data. web3montenegro.me · bhaskarlive.in · www.ibtimes.co.in · samacharnama.com · www.sentinelassam.com