Details of 3897 customers on dark web; Major data leak reported in SBI

NEW DELHI: A data leak involving customer information was detected at the State Bank of India (SBI), the country's largest public sector bank. Preliminary investigations indicate that the personal data of 3,897 customers surfaced on the dark web. The bank announced that a detailed investigation into the incident is underway.

Reports suggest that the leaked personal information includes customer names, registered mobile numbers, dates of birth, email addresses, residential addresses, and gender. Additionally, details related to bank branches, customer identification numbers, and information pertaining to loan applications and other documents have also been exposed.

SBI confirmed receiving an alert prior to the data leak reported on October 16th. The alert came from a threat intelligence service provider, the Defence Cyber ​​Agency, and the Indian Computer Emergency Response Team (CERT-In). A preliminary examination of approximately 375,000 records available on the dark web identified the personal information of 3,897 customers. The bank noted that further investigation is required to verify the authenticity of the data and determine the actual extent of the leak.

SBI clarified that the data leak has not impacted the bank's operations or financial transactions. Authorities stated that the bank's daily operations are continuing without interruption and that cybersecurity measures have been promptly activated. An investigation is currently underway—with the assistance of an independent cybersecurity agency—to identify the source of the leak and assess the extent of the exposed data. Furthermore, the potential risks to customers resulting from this data leak will also be evaluated.