SBI Probes Dark Web Leak After 3,897 Customer Records Exposed
State Bank of India is investigating the exposure of 3,897 customer records on the dark web. Find out what data was leaked and the bank's response.
The State Bank of India (SBI) has launched a comprehensive investigation after discovering that thousands of customer records were potentially exposed on the dark web. The bank confirmed that a preliminary analysis identified 3,897 records containing personally identifiable information (PII) among a much larger set of suspected leaked data.
How the Breach Was Discovered
The issue came to light on October 16, when SBI received critical alerts from multiple security entities. These included the bank's own Threat Intelligence Service Provider, the Defence Cyber Agency, and the Indian Computer Emergency Response Team (CERT-In). These agencies warned the bank about the suspected exposure of sensitive customer data circulating on the dark web.
Upon receiving the alerts, SBI conducted an initial screening of approximately 3,75,000 records found on the dark web. From this massive data set, the bank successfully identified 3,897 specific customer records that contained private information.
What Information Was Leaked?
The exposed data is highly sensitive, consisting of various personally identifiable details that could be misused. According to the bank, the leaked information includes:
- Personal Details: Full names, dates of birth, gender, and email addresses.
- Contact Information: Registered mobile numbers and residential addresses.
- Banking Identifiers: Branch details and Customer Information File (CIF) identifiers.
- Loan Data: Lead IDs and metadata associated with loan and lead records, along with other related files.
SBI's Immediate Response and Action Plan
Following the discovery, SBI promptly activated its cyber incident response and containment protocols to mitigate further risks. To ensure a thorough probe, the bank has engaged an independent cybersecurity agency empanelled by CERT-In. This agency is currently conducting a comprehensive assessment to determine:
- The authenticity and completeness of the exposed data.
- The potential source of the leak.
- The full extent of the exposure.
- The specific risks posed to both the customers and the institution.
The bank stated that remedial and preventive measures are being implemented as the assessment progresses.
Impact on Bank Operations
Despite the security scare, SBI has clarified that the incident has not hindered its daily functions. In an exchange filing, the bank emphasized that there is no material impact on its core business operations, financial performance, or business continuity. All core banking functions continue to operate normally without any disruptions.
SBI has assured that it will continue to monitor the situation closely and will adhere to all applicable regulatory requirements as the investigation unfolds.