Science & Tech · Cybersecurity · 56 mins ago
SBI says cyberattack exposed 3,897 customer records
State Bank of India says a cyberattack exposed 3,897 customer records containing personal information.
The bank said the records included names, contact details, addresses, dates of birth and loan information.
The bank has hired an independent cybersecurity agency to assess the leak and investigate its scope.
The disclosure followed an earlier online claim that hackers had accessed data from 375,000 SBI customers, but that claim’s authenticity and scale were unverified.
SBI’s reported figure is far smaller than the unverified claim made online.
Exposed personal and loan details can create risks such as identity theft, financial fraud and targeted phishing.
SBI says the incident is not expected to disrupt its core business or financial performance.
SBI said a preliminary analysis found 3,897 customer records containing personal information on the dark web.
The exposed information included contact details and customer identifiers, with some reports also listing loan-related records.
SBI said it was investigating the source, authenticity and full extent of the exposure with help from an independent cybersecurity agency.
The bank said its core banking operations and business functions remained unaffected.
The findings followed an online claim that a dataset contained about 375,000 rows of SBI-linked data, a figure SBI’s preliminary analysis did not identify as the number of affected customers.
- Who
- State Bank of India (SBI) said customer records were exposed.
- What
- A preliminary analysis identified 3,897 records containing personal information on the dark web.
- When
- SBI said it received alerts on October 16. It reported the incident on October 21.
- Where
- The records were found on the dark web.
- Why
- The source and cause of the exposure remain under investigation.
SBI
Siriusim, as described by CyberPulse56
Claim about the dataset
SBI
SBI’s preliminary analysis identified 3,897 customer records containing personal information among around 375,000 records examined.
Siriusim, as described by CyberPulse56
The group allegedly claimed to possess around 375,000 rows of SBI-linked data and 2,722 PDF documents.
Authenticity and extent
SBI
SBI said its investigation would establish the data’s authenticity and completeness and identify the exposure’s source and extent.
Siriusim, as described by CyberPulse56
CyberPulse56 said the authenticity, origin and extent of the alleged exposure were unverified.
SBI said it received alerts about the suspected exposure from its threat intelligence service provider, the Defence Cyber Agency and CERT-In.
Economic Times reported CyberPulse56’s account of an alleged claim by a group using the name Siriusim.
SBI reported that preliminary analysis had identified 3,897 customer records containing personal information on the dark web.
- Records identified
- 3,897 customer records containing personal information
- Records examined
- Around 3.75 lakh records on the dark web
- Alerts received
- October 16
- Investigation
- Independent CERT-In-empanelled cybersecurity agency
- Operational impact
- SBI said core banking and business functions continued normally
5 sources
State Bank of India Confirms Data Leak After 3,897 Customer Records Found on Dark Web
SBI Flags Exposure Of 3,897 Customer Records On Dark Web
SBI finds 3,897 customer records on dark web after hacker’s claim
State Bank of India reports cyberattack involving nearly 3,900 customer records
SBI data breach claim: Hackers allegedly access 3.75 lakh accounts