The State Bank of India (SBI) has confirmed a cyber incident that resulted in hackers accessing sensitive customer records. In a recent filing with stock exchanges, the bank revealed that approximately 3,897 customer records containing personally identifiable information (PII) were allegedly exposed on the dark web. SBI has indicated that this breach has not significantly impacted its core operations, financial performance, or business continuity.

On October 16, SBI received alerts from the Threat Intelligence Service Provider, the Defence Cyber Agency, and the Indian Computer Emergency Response Team (CERT-In) regarding the suspected exposure of customer data. Following these alerts, the bank conducted a preliminary analysis of around 3,75,000 records found on the dark web, which led to the identification of the compromised customer records.

The exposed data reportedly includes various personal details such as registered mobile numbers, dates of birth, names, gender, email addresses, and residential addresses. Additionally, the records contained branch and customer information file identifiers, lead IDs, and metadata associated with loan and lead records, as outlined in the bank’s filing.

Impact on Banking Operations

Despite the breach, SBI has assured its customers that core banking operations remain unaffected. The bank stated, “The bank’s core business functions continue to operate normally without disruptions.” SBI has activated its cyber incident response and containment protocols promptly to manage the situation.

Furthermore, the bank has initiated a detailed investigation to verify the authenticity and completeness of the exposed data. This investigation aims to identify the potential source of the breach, assess the extent of the exposure, and evaluate the risks posed to both customers and the bank. SBI has committed to closely monitoring the situation and will take necessary measures in accordance with regulatory requirements as the investigation progresses.

Experts initially reported the potential data breach on October 19, highlighting the seriousness of the situation. SBI has not publicly identified the hacker group allegedly responsible for the breach, although reports suggest that an anonymous group known as Siriusim claimed on the dark web forum BreachForums to have obtained information related to 3.75 lakh SBI customers.

Regulatory Context and Previous Incidents

This incident occurs against a backdrop of heightened regulatory scrutiny regarding cybersecurity within the banking sector. In July, Bank of Baroda acknowledged a significant data leak that exposed one terabyte of customer data, raising concerns about data protection and customer privacy across financial institutions in India.

The increasing frequency of cyberattacks on banks has prompted regulators to focus more intently on cybersecurity measures. Financial institutions are now expected to implement robust security protocols to protect customer data and mitigate risks associated with potential breaches.

As the investigation into the SBI data breach continues, the bank is likely to face increased pressure from regulators and customers alike to enhance its cybersecurity infrastructure. The outcome of this incident may influence future policies and practices within the banking sector, as institutions strive to safeguard sensitive information in an evolving digital landscape.

Long or Short, get news the way you like. No ads. No redirections. Download Newspin and Stay Alert, The CSR Journal Mobile app, for fast, crisp, clean updates!

App Store – https://apps.apple.com/in/app/newspin/id6746449540

Google Play Store – https://play.google.com/store/apps/details?id=com.inventifweb.newspin&pcampaignid=web_share