Hacker group or terrorist-linked organisation?

Technology is advancing at a rapid pace, and it is really something else. Those tasks once deemed arduous can now be accomplished from the comfort of one's home using a phone. The benefits this brings to people, particularly the elderly, are immense.

Along with this progress, cyber criminals are also enjoying their heyday after upgrading with sophisticated tricks to siphon money. Most recently, it has emerged that critical information belonging to 3,897 account holders of the State Bank of India (SBI)—the country's largest public sector bank—has been leaked on the dark web. The SBI officially confirmed that customer IDs, mobile numbers, and loan details have been compromised. The bank has also engaged an independent cybersecurity agency to investigate the scope and nature of the data breach.

At the same time, it is reassuring that the bank confirmed that all accounts are safe, as the data breach did not affect the core operations. Is the data breach the handiwork of a hacker group or terrorist-linked organisations trying to overthrow the government?

SBI, which leads crores of ordinary people in the country to digital payments, failed to fully protect the personal information of its customers. This is not just a concern but a big lapse by the bank itself. This incident points to the need to strengthen banking security.

Banking security should not be limited merely to strengthening digital lockers. It is essential to continuously upgrade the security auditing of banks by leveraging advanced technologies, including Artificial Intelligence (AI). Reports have emerged regarding a data breach at HDFC Bank as well; therefore, customers must exercise extreme caution. One should be very careful when responding to phone calls or links that appear to come from the bank. Under no circumstances should you disclose an OTP or personal banking information over the phone. Customers must be aware that no bank will ever call to ask for personal information over the telephone.

Reports have emerged that the private security keys of e-Mudhra—a digital security agency that issues web security certificates and provides digital signatures—have been leaked.

A leak was discovered involving eight keys, six of which are used to verify website addresses. The company clarified that these compromised keys were not used to generate individual digital signatures; therefore, electronic signatures remain unthreatened for the time being.

Every such security breach in the technological sphere serves as a learning opportunity, primarily by highlighting existing security vulnerabilities. Addressing these flaws requires the implementation of urgent precautionary measures. It has become imperative for the nation’s critical institutions—including those in the banking sector—to prepare on a war footing to build robust new defences for digital security. Furthermore, regulatory authorities must be prepared to investigate any lapses and initiate appropriate legal action.