SBI flags exposure of 3,897 customer records

Listen to this article in summarized format

SBI cash withdrawal rules change from October 1 — SBI is investigating the suspected dark web exposure of 3,897 customer records containing personal and loan-related information, while stating that its core operations and financial performance remain unaffected.

State Bank of India (SBI) has flagged the suspected exposure of 3,897 customer records containing personally identifiable information (PII) on the dark web, including registered mobile numbers, dates of birth, email IDs and residential addresses.

The country's largest lender said on Wednesday that it had initiated a cyber incident response and engaged an independent cybersecurity agency to investigate the nature and extent of the alleged data compromise.

Also read: SBI data breach claim: Hackers allegedly access 3.75 lakh accounts

In a filing on the stock exchanges, SBI said it received communications on October 16 from its Threat Intelligence Service Provider, the Defence Cyber Agency and CERT-In regarding an alert about the suspected exposure of customer data on the dark web.

A preliminary analysis of approximately 375,000 records available on the dark web identified 3,897 customer records containing PII, the bank said. The exposed information reportedly included customers' names, gender, registered mobile numbers, dates of birth, email addresses, residential addresses, branch and CIF identifiers, lead IDs, and metadata associated with loan and lead records and other related files.

SBI launches investigation into suspected data exposure

SBI said a detailed investigation was necessary to establish the authenticity and completeness of the exposed data, determine the potential source and extent of the exposure, and assess the associated risks to customers and the bank.

“The Bank promptly activated its cyber incident response and containment protocols,” SBI said in the exchange filing.

The lender added that it had engaged an independent CERT-In-empanelled cybersecurity agency to conduct a comprehensive assessment and investigate the nature and extent of the alleged compromise.

The bank said it was continuing its assessment and implementing appropriate remedial and preventive measures as required.

Also read: PSU banks plan youth banking push before Diwali, with savings, loans

Bank says core operations unaffected

SBI said the incident had no material impact on its core business operations, financial performance or business continuity.

“We wish to submit that this does not have any material impact on Bank’s Core business operations, financial performance or business continuity,” the filing said.

“The Bank’s core business functions continue to operate normally without disruptions,” it added.

SBI said it was monitoring the situation closely and would take appropriate measures in accordance with applicable regulatory requirements. The detailed assessment remains underway.