SBI identifies 3,897 customer records in dark web data exposure, launches investigation

In an exchange filing on Tuesday, the bank said it received communications on October 16 from its Threat Intelligence Service Provider, the Defence Cyber Agency and CERT-In regarding an alert about the suspected exposure of customer data on the dark web.

The preliminary analysis covered approximately 3,75,000 records available on the dark web, of which 3,897 customer records containing personally identifiable information (PII) were identified, the bank said.

The exposed information reportedly included customers' registered mobile numbers, dates of birth, names, gender, email addresses and residential addresses. It also included branch and customer information file (CIF) identifiers, lead IDs, and metadata associated with loan and lead records and other related files.

SBI said a detailed investigation was required to establish the authenticity and completeness of the exposed data, determine the potential source and extent of the exposure, and assess the risks associated with the incident for customers and the bank.

The bank said it had promptly activated its cyber incident response and containment protocols following the alert. It has also engaged an independent cybersecurity agency empanelled by CERT-In to conduct a comprehensive assessment and investigate the nature and extent of the alleged compromise.

The assessment is currently underway, and appropriate remedial and preventive measures are being implemented as required, SBI said.

The bank clarified that the incident has no material impact on its core business operations, financial performance or business continuity. Its core business functions continue to operate normally without disruptions, it added.

SBI said it would continue to monitor the situation closely and take appropriate measures in accordance with applicable regulatory requirements. (ANI)