SBI was alerted on October 16 by its threat intelligence service provider, Defence Cyber Agency and CERT-In about suspected customer data exposure on the dark web; the bank activated cyber incident response protocols and brought in an independent CERT-In-empanelled agency to investigate.

Country’s largest lender State Bank of India (SBI) has identified 3,897 customer records containing personally identifiable information (PII) in a preliminary analysis of data available on the dark web, after receiving alerts from its threat intelligence service provider, the Defence Cyber Agency and CERT-In. The bank received the communications on October 16 regarding an alert concerning the suspected exposure of its customer data on the dark web, SBI said in a regulatory disclosure on Wednesday. During its preliminary analysis of approximately 375,000 records available on the dark web, the bank identified 3,897 customer records containing PII.

The exposed information reportedly included customers’ registered mobile numbers, dates of birth, names, gender, email addresses and residential addresses. It also included branch and CIF identifiers, lead IDs, and metadata associated with loan or lead records and other related files, SBI said. SBI, however, said a detailed investigation was required to establish the authenticity and completeness of the exposed data, determine the potential source and extent of the exposure, and assess the associated risks to customers and the bank. “The Bank promptly activated its cyber incident response and containment protocols,” SBI said.

The lender has also engaged an independent CERT-In-empanelled cybersecurity agency to conduct a comprehensive assessment and investigate the nature and extent of the alleged compromise.

Source link