The State Bank of India (SBI) on Wednesday, October 21, assured customers that their account balances were safe following a suspected data leak involving customer records identified on the dark web. The bank said the incident had affected a very small number of customers and had no material impact on its IT systems, core business operations, financial performance or business continuity.
In a customer notice, SBI said it was taking all possible steps to protect customers' interests. The bank reiterated that the safety of customers' financial assets and data, as well as their trust, remained its highest priorities.
The assurance comes after SBI disclosed a data loss incident involving the suspected exposure of customer information on the dark web.
SBI's preliminary analysis of approximately 3.75 lakh records available on the dark web identified 3,897 customer records containing personally identifiable information (PII).
The exposed information reportedly included customers' names, gender, dates of birth, registered mobile numbers, email addresses, residential addresses, branch details, Customer Information File (CIF) identifiers, lead IDs and metadata associated with loan and lead records, along with related files.
According to the bank's disclosure, it received communications on October 16 from its threat intelligence service provider, the Defence Cyber Agency and the Indian Computer Emergency Response Team (CERT-In) regarding the suspected exposure of customer data.
SBI promptly activated its cyber incident response and containment protocols. It also engaged an independent cybersecurity agency empanelled by CERT-In to conduct a comprehensive assessment and investigate the nature and extent of the suspected compromise.
Source link







