CONNECT WITH US
Tech

Tech

SBI finds 3,897 customer records on dark web after hacker’s claim

YourStory - Demo logo

Published on

Add as a preferred source on Google
SBI finds 3,897 customer records on dark web after hacker’s claim

State Bank of India (SBI) has disclosed a suspected customer data breach, saying it found 3,897 records containing personal information on the dark web. The country’s largest public sector lender confirmed the findings in a stock exchange filing on Wednesday and has launched a detailed cybersecurity investigation.

The bank said it received alerts from its threat intelligence service provider, the Defence Cyber Agency and the Indian Computer Emergency Response Team (CERT-In), all pointing to a possible exposure of customer information. In a preliminary review of around 3.75 lakh records circulating on the dark web, SBI identified 3,897 records containing personally identifiable information.

The disclosure follows a claim made last week by a threat actor using the name “Siriusim”. In a post on BreachForums, a site known for trading stolen data, the actor claimed to possess 3.75 lakh customer records and 2,722 PDF documents linked to SBI. The claim was flagged on October 16 by the X account CyberPulse56.

The listing described the data as a CSV file containing 3.75 lakh rows, along with the PDF documents. The poster also shared four sample records as evidence. The Free Press Journal examined the samples and found that the phone numbers were real. Most of the data appeared to relate to loans, while some entries concerned savings account applications and customer acquisition.

Following the alerts, SBI activated its cyber incident response protocols and engaged an independent cybersecurity agency empanelled with CERT-In. The agency will verify the authenticity of the leaked records, trace the source of the potential exposure and assess the associated security risks.


Source link

Disclaimer

We strive to uphold the highest ethical standards in all of our reporting and coverage. We TheMorningPulse.fyi want to be transparent with our readers about any potential conflicts of interest that may arise in our work. It's possible that some of the investors we feature may have connections to other businesses, including competitors or companies we write about. However, we want to assure our readers that this will not have any impact on the integrity or impartiality of our reporting. We are committed to delivering accurate, unbiased news and information to our audience, and we will continue to uphold our ethics and principles in all of our work. Thank you for your trust and support.