State Bank of India Investigates Data Breach of 3,897 Customer Records
The State Bank of India (SBI) has confirmed that it is investigating a data breach involving 3,897 customer records that were found on the dark web. The bank reassured its customers that their account balances and funds remain secure during this investigation. SBI began probing the suspected data exposure after receiving alerts from its threat intelligence service provider on October 16.
In a statement posted on social media, SBI emphasized that customer funds are safe and urged individuals to practice safe digital banking. The bank advised customers to avoid sharing their one-time passwords (OTPs), PINs, or passwords with anyone and to remain vigilant against suspicious communications.
SBI has reached out to the affected customers via email and WhatsApp to inform them about the breach. A preliminary analysis of the data available on the dark web revealed that the exposed records contained sensitive information, including registered mobile numbers, dates of birth, names, gender, email addresses, and residential addresses. Additionally, the data included branch identifiers and metadata related to loan records.
Final Assessment
The bank stated that a thorough investigation is necessary to determine the authenticity and completeness of the exposed data, as well as to identify the source and extent of the breach. SBI has activated its cyber incident response protocols and engaged an independent cybersecurity agency to conduct a comprehensive assessment of the situation.
Despite the breach, SBI reported that there has been no material impact on its core business operations or financial performance, and all business functions continue to operate normally. The bank is implementing appropriate remedial measures to prevent future incidents and ensure customer safety.
