State Bank of India (SBI) has reached out to customers whose data was implicated in a recent data breach, assuring them that their account balances and funds remain secure. In a statement released on Friday, the bank confirmed that it has individually notified all affected customers via email and/or WhatsApp. The message reiterated the safety of their funds, stating, “We reiterate that your account balances and funds are safe with us.”

Details of the Data Breach

This assurance comes in the wake of SBI’s preliminary analysis, which identified 3,897 customer records containing personal information among approximately 3.75 lakh records discovered on the dark web. The bank activated its cyber incident response protocols following alerts from its threat intelligence service provider, the Defence Cyber Agency, and the Indian Computer Emergency Response Team (CERT-In) on October 16.

The identified records reportedly included customers’ names, registered mobile numbers, dates of birth, gender, email addresses, residential addresses, branch details, customer information file (CIF) identifiers, lead IDs, and metadata linked to loan and lead records. The breach was initially brought to light by the cybersecurity monitoring account CyberPulse.

It claimed that a threat actor using the name Siriusim had leaked documents and personal data allegedly associated with SBI. According to the post, the dataset comprised 3.75 lakh rows in CSV files and 2,722 PDF documents, encompassing customer information, loan applications, supporting documents, account-opening forms, and addresses.

Ongoing Investigation and Measures

In response to the breach, SBI has stated that a comprehensive investigation is necessary to ascertain the authenticity and completeness of the exposed data, as well as to identify its source and extent. The bank is also evaluating the potential risks posed to both customers and itself. To facilitate this, SBI has engaged a cybersecurity agency that is empanelled by CERT-In to conduct an independent assessment of the situation.

Despite the breach, SBI has indicated that there has been no significant impact on its core business operations, financial performance, or overall business continuity. The bank has emphasised that its core functions are continuing to operate normally, and it is implementing remedial and preventive measures as part of the ongoing investigation.

As the investigation progresses, SBI is committed to keeping its customers informed about any developments. The bank has reassured its clientele that it is taking all necessary steps to address the situation effectively. The focus remains on ensuring the safety and security of customer information while maintaining transparency throughout the process.

Long or Short, get news the way you like. No ads. No redirections. Download Newspin and Stay Alert, The CSR Journal Mobile app, for fast, crisp, clean updates!

App Store – https://apps.apple.com/in/app/newspin/id6746449540

Google Play Store – https://play.google.com/store/apps/details?id=com.inventifweb.newspin&pcampaignid=web_share