SBI Investigates Possible Leak of Nearly 3,900 Customer Records on Dark Web

The State Bank of India (SBI), the country’s largest banking institution, has launched an investigation into a potential data breach that may have exposed nearly 3,900 customer records on the dark web. The bank disclosed the issue to stock exchanges after initial findings indicated that personally identifiable information (PII) might have been compromised.

On October 16, SBI was alerted by multiple entities including its threat intelligence service provider, the Defence Cyber Agency, and the Indian Computer Emergency Response Team (CERT-In) about the suspected leak. These organizations flagged the presence of customer data potentially available on illicit dark web platforms.

Following these warnings, SBI conducted a preliminary analysis of approximately 375,000 records found circulating on the dark web. This review identified 3,897 records linked to SBI customers that contained sensitive personal details. The exposed data reportedly included registered mobile phone numbers, dates of birth, names, gender, email addresses, residential addresses, and banking specifics such as branch and customer information file (CIF) identifiers. Additional information related to loan and lead records was also part of the exposed metadata.

The bank emphasized that a more in-depth investigation is necessary to confirm the authenticity and completeness of the data found, understand how the information was accessed, and assess the scope and potential risks associated with the incident. SBI noted that this process is crucial to determine both the source of the exposure and the implications for affected customers.

In response to the incident, SBI has activated its cyber incident response and containment strategies. The bank has also engaged an independent cybersecurity agency, which is empanelled by CERT-In, to carry out a thorough assessment and investigation into the alleged compromise. The ongoing inquiry aims to identify vulnerabilities and implement measures to prevent future incidents.

Despite the seriousness of the situation, SBI assured stakeholders that the event has not caused any material disruption to its core business operations, financial results, or overall business continuity. The bank affirmed that its essential functions are continuing without interruption and that it is taking appropriate remedial actions to strengthen data protection.

This development highlights the growing challenges faced by financial institutions in safeguarding customer data amid increasing cyber threats. Banks globally are under pressure to enhance security frameworks as cybercriminals increasingly target sensitive financial information for fraudulent activities. SBI’s swift response and collaboration with cybersecurity experts reflect the importance of proactive defense mechanisms in the banking sector.

As the investigation progresses, customers are advised to remain vigilant and monitor their accounts for any unusual activity. The banking industry continues to evolve in its approach to cybersecurity, balancing the need for digital services with robust protections against data breaches. SBI’s experience serves as a reminder of the ongoing necessity for stringent security measures within India’s financial ecosystem.