SBI probes suspected dark web leak involving 3,897 customer records

The lender said preliminary analysis of around 375,000 dark web records identified 3,897 customer records containing personal information; a detailed investigation is under way

The country’s largest lender, State Bank of India (SBI), has flagged a suspected exposure of customer data on the dark web. A preliminary analysis identified 3,897 customer records containing personally identifiable information, according to a disclosure to the stock exchanges.

 

The bank received alerts on October 16 from its threat intelligence service provider, the Defence Cyber Agency and the Indian Computer Emergency Response Team (CERT-In), regarding the suspected exposure of customer data on the dark web.

 

A preliminary analysis of around 375,000 records available on the dark web identified 3,897 customer records containing personal information.

 

These include registered mobile numbers, date of birth, names, gender, email addresses, residential addresses, branch and customer information file (CIF) identifiers, lead IDs, and metadata associated with loan and lead records.

 

SBI said a detailed investigation is required to establish the authenticity and completeness of the exposed data, determine the potential source and extent of the exposure, and assess the risks to customers and the bank.

 

The lender activated its cyber incident response and containment protocols and engaged an independent cybersecurity agency empanelled by CERT-In to conduct a comprehensive assessment and investigate the alleged compromise.

 

The bank said the incident had no material impact on its core business operations, financial performance or business continuity. It added that its core business functions continued to operate normally.

 

A detailed assessment is underway, and the bank is implementing appropriate remedial and preventive measures, as required.