SBI Data Breach: RS MP AA Rahim Demands Independent Probe
Rajya Sabha MP AA Rahim writes to FM Nirmala Sitharaman demanding an independent probe into the leak of SBI customer data on the dark web.
In a significant move to safeguard the financial security of millions, Rajya Sabha MP A.A. Rahim has written to Union Finance Minister Nirmala Sitharaman, demanding an independent investigation into the SBI data breach. The MP's call for action comes after reports emerged that sensitive customer information from the State Bank of India (SBI) was exposed on the dark web, raising alarms about potential financial fraud and identity theft.
Urgent Appeal to the Finance Ministry
In his formal communication to the Finance Minister, MP A.A. Rahim emphasized the need for a comprehensive inquiry to uncover exactly how the data became accessible to unauthorized parties. He urged the Ministry of Finance to establish the full scale of the exposure and determine if more sensitive records beyond the initial findings were compromised.
Rahim highlighted that the mere fact that banking services remained undisrupted does not lessen the gravity of the situation. He stressed that the compromise of personal information is a serious security failure that cannot be overlooked.
Risks to Vulnerable Citizens
The MP expressed deep concern over the potential fallout for specific groups of society. He noted that pensioners, daily wage workers, and small traders—who place immense trust in public sector banks to keep their data safe—are particularly vulnerable to the consequences of such a breach.
According to Rahim, the exposure of personal details opens the door to several cybercrimes, including:
- Identity Theft: Criminals using personal details to impersonate customers.
- Targeted Phishing: Highly personalized scams designed to trick users into giving away passwords or OTPs.
- Financial Fraud: Direct unauthorized transactions or loan frauds.
What Data Was Leaked?
The controversy follows a disclosure by SBI, which revealed that its preliminary analysis identified 3,897 customer records containing personally identifiable information (PII) out of approximately 3,75,000 records examined on the dark web.
The leaked data reportedly includes a wide array of sensitive details:
- Customer names and registered mobile numbers.
- Dates of birth, gender, and email addresses.
- Residential addresses and branch details.
- Customer Information File (CIF) identifiers and lead IDs.
- Metadata related to loan and lead records.
SBI's Response and the Way Forward
The bank stated that it was alerted to the suspected exposure on October 16 by its threat intelligence service provider, the Indian Computer Emergency Response Team (CERT-In), and the Defence Cyber Agency. In response, SBI activated its cyber incident response protocols and hired an independent cybersecurity agency empanelled by CERT-In to assess the damage.
Demands for Accountability and Transparency
MP A.A. Rahim has not only called for a probe into this specific incident but has also urged the Finance Ministry to implement broader systemic changes, including:
- Direct Notification: SBI must immediately inform all affected customers about the breach.
- Support Channels: The bank should create accessible ways for customers to report suspected fraud and receive assistance.
- Systemic Review: A comprehensive review of cybersecurity safeguards across all public sector banks to strengthen real-time threat detection.
- Accountability: Ensuring that strict action is taken if negligence or security lapses are discovered.
Rahim concluded by calling for total transparency, requesting that the findings of the investigation and the subsequent corrective measures be made public.