[CLSTR]
< Back to situations

Monitor this situation.

[SITUATION] · [ACTIVE] · [TECHNOLOGY]

3 clusters · 42 sources · 3 days · First seen · Last updated

State Bank of India data breach

Overview

The State Bank of India (SBI) confirmed a cyber incident involving the suspected exposure of 3,897 customer records on the dark web. This specific subset was identified within a larger dataset of approximately 375,000 records discovered online. The breach was disclosed following alerts received on October 16 from the Defence Cyber Agency and the Indian Computer Emergency Response Team (CERT-In).

The exposed personally identifiable information (PII) includes names, mobile numbers, dates of birth, gender, email addresses, and residential addresses, as well as branch details, Customer Information File (CIF) identifiers, lead IDs, and metadata related to loan applications. SBI stated that the incident has no material impact on its core business operations, financial performance, or business continuity, and assured customers that account balances remain safe. The bank has initiated cyber incident response and containment procedures and has engaged an independent cybersecurity agency empanelled by CERT-In to conduct a comprehensive investigation.

Political fallout has intensified following the disclosure. While the Congress party previously criticized the government’s handling of the initial October 16 alert, A.A. Rahim, a Rajya Sabha member from the CPI(M), has called on Union Finance Minister Nirmala Sitharaman to order an independent investigation. Rahim expressed concern that the exposure could lead to “identity theft, targeted phishing, and financial fraud,” specifically impacting vulnerable groups such as pensioners, laborers, and small traders. He urged the Ministry of Finance to determine the source and scope of the leak and to strengthen cybersecurity measures across all public sector banks. Additionally, the Internet Freedom Foundation has called on the bank to notify all affected customers regarding the specific information exposed.

Following the initial disclosure, SBI has begun individually notifying affected customers via email and WhatsApp.

Entities

State Bank of India · CERT-In · Defence Cyber Agency · Indian Computer Emergency Response Team · CyberPulse56

Claims

What the coverage asserts, and how many sources carry each claim.

Timeline

  1. [TECHNOLOGY] 15 sources
    State Bank of India identifies 3,897 customer records leaked on dark web

    State Bank of India confirmed 3,897 customer records containing personal data were exposed on the dark web. The bank maintains that all customer funds and core banking operations remain secure.

  2. [TECHNOLOGY] 2 sources
    State Bank of India faces cyberattack amid data theft allegations

    The Congress party has criticized the Indian government following a cyberattack on the State Bank of India, alleging the theft of personal data belonging to nearly 3,900 customers.

  3. [BUSINESS] 32 sources
    State Bank of India confirms exposure of 3,897 customer records on dark web

    State Bank of India is investigating a data breach after finding 3,897 customer records, including names and contact details, exposed on the dark web following alerts from cybersecurity agencies.

Sources

alqamar.info · bhaskarhindi.com · bhaskarlive.in · businessconnectindia.in · deccanchronicle.com · deccanherald.com · devdiscourse.com · dnaindia.com · econoTimes.com · enavabharat.com · hindi.business-standard.com · hindi.news18.com · ibc24.in · ibtimes.co.in · inc42.com · indusbusinessjournal.com · it-boltwise.de · khabarfast.com · m.businesstoday.in · morungexpress.com · munsifdaily.com · navabharat.com · navabharat.news · nayaindia.com · news.abplive.com · newsable.asianetnews.com · newsindialive.in · newstodaynet.com · prabhatkhabar.com · pratahkal.com · saferworld.org.uk · sahilonline.net · samacharnama.com · sentinelassam.com · shiningindianews.com · socialnews.xyz · taxguru.in · telanganatribune.com · thehackernews.com · web3montenegro.me · yespunjab.com · zoomnews.in

This summary has been updated 4 times: see revision history