SBI has confirmed that the personal data of 3,897 customers has been found on the dark web. The leaked information includes mobile numbers, email addresses, physical addresses, and loan records.
SBI के ग्राहकों का डेटा डार्क वेब पर लीक, फ़ोन नंबर, ईमेल से घर के पते और ऋण रिकॉर्ड तक सब उजागर
Headline…
- SBI has confirmed that the personal information of 3,897 customers has been exposed on the dark web.
- The leaked data includes mobile numbers, dates of birth, email IDs, home addresses, and loan-related information.
- The bank has appointed an independent cybersecurity agency, approved by CERT-In, to conduct an investigation.
- According to SBI, its banking services are operating normally, and there has been no significant impact on its business operations.
India’s largest public sector bank, State Bank of India (SBI), confirmed a data breach on Wednesday. According to the bank, an initial examination of records available on the dark web revealed information belonging to 3,897 customers, including data related to their personal identity. The exposed information comprises sensitive details such as customers’ mobile numbers, dates of birth, email IDs, and residential addresses.
3.75 lakh records found on the dark web; 3,897 contain personal information.
In a regulatory filing, SBI stated that it had received alerts regarding a potential leak of customer data from its threat intelligence service provider, the Defence Cyber Agency, and the Indian Computer Emergency Response Team (CERT-In).
According to the bank, an initial analysis of approximately 3.75 lakh records found on the dark web identified 3,897 customer records containing Personally Identifiable Information (PII).
The exposed data includes customers’ registered mobile numbers, names, dates of birth, gender, email IDs, and residential addresses. Additionally, it reportedly includes branch and CIF (Customer Information File) identification numbers, lead IDs, as well as metadata and other files related to loans and lead records.
SBI initiates investigation; appoints an independent cybersecurity agency.
SBI stated that upon learning of the incident, it activated its cyber-incident response and control procedures. An independent cybersecurity agency, approved by CERT-In, has been appointed to conduct a detailed investigation into the matter and assess any potential impact. The bank is currently working to determine the authenticity and completeness of the data found on the dark web, its source, the volume of information exposed, and the potential risks it may pose. A clear picture regarding the full scope of the incident will emerge only after the investigation is complete.
The bank has also clarified that this incident has had no significant impact on its core business operations, financial performance, or business continuity. According to SBI, its primary services are functioning normally, and there has been no disruption to banking services for its customers. Corrective and preventive measures are also being taken to mitigate risks.
Hacker group previously claimed to have obtained the data
Earlier this week, a hacker group called ‘SiegedSec’ claimed to have gained access to confidential customer data linked to SBI. The group’s claim included personal customer information, as well as documents related to loan applications and account openings.
‘CyberPulse56,’ a social media account focused on cybersecurity monitoring, also shared this claim on X (formerly Twitter). According to the post, the hacker group alleged that it possessed approximately 375,000 data entries in CSV format and 2,722 PDF documents. However, the authenticity of these claims and the actual source of the data are still under investigation.
Decline observed in SBI shares
Amid news of the data breach, SBI shares also saw a decline in the stock market on Wednesday. Around 12:18 PM, the bank’s shares were trading 0.61 percent lower at approximately ₹967 on the NSE.
According to exchange data, SBI shares have reached a 52-week high of ₹1,234.70 and a 52-week low of ₹900.95. Over the past six months, the share has fallen by about 13 percent, while it has delivered a return of approximately 6.5 percent over the last year. Over a five-year period, the share has yielded a return of 92.30 percent.
Follow Us on… 
+