New Delhi: State Bank of India (SBI) is investigating the suspected exposure of 3,897 customer records containing personally identifiable information (PII) on the dark web.
In a regulatory filing dated October 21, the bank said it received alerts on October 16 from its threat intelligence service provider, the Defence Cyber Agency, and the Indian Computer Emergency Response Team (CERT-In) regarding the suspected data exposure.
A preliminary analysis of around 3.75 lakh records found on the dark web identified 3,897 records containing customer information.
The potentially exposed data includes:
Personal details: Names, dates of birth, and gender.
Contact information: Registered mobile numbers, email addresses and residential addresses.
Banking-related identifiers: Branch details and Customer Information File (CIF) identifiers.
Other records: Lead IDs, metadata linked to loan and lead records, and related files.
SBI Initiates Cybersecurity Investigation
SBI said a detailed investigation is required to verify the authenticity of the data, determine the source and extent of the suspected exposure, and assess the risks to customers and the bank.
The bank has activated its cyber incident response and containment protocols. It has also engaged an independent cybersecurity agency empanelled by CERT-In to assess the incident and investigate the suspected compromise.
Bank Says Operations Remain Unaffected
SBI said the incident has had no material impact on its core business operations, financial performance, or business continuity. Its operations continue normally, without disruption.
The bank said it is monitoring the situation and implementing remedial and preventive measures as required. The bank will take further action in accordance with applicable regulatory requirements as the investigation progresses.
