SBI Data Leak: PSB probes suspected exposure of 3,897 customer records on dark web

New Delhi: State Bank of India (SBI), the country's largest public sector lender, is investigating the suspected exposure of 3,897 customer records containing personally identifiable information on the dark web. The bank has said the incident has no material impact on its core business operations, financial performance or business continuity.

Follow The PSUWatch Channel on Whatsapp

In a regulatory filing dated October 21, SBI said it received alerts on October 16 from its threat intelligence service provider, the Defence Cyber Agency and the Indian Computer Emergency Response Team (CERT-In) regarding the suspected exposure of customer data on the dark web.

A preliminary analysis of approximately 3.75 lakh records available on the dark web identified 3,897 customer records containing personally identifiable information (PII), the bank said.

The potentially exposed information reportedly includes customers' names, registered mobile numbers, dates of birth, gender, email addresses and residential addresses. It also includes branch and Customer Information File (CIF) identifiers, lead IDs, metadata associated with loan and lead records, and other related files.

SBI said a detailed investigation was required to establish the authenticity and completeness of the exposed data, identify the potential source and extent of the exposure, and assess the associated risks to customers and the bank.

Follow PSU Watch on LinkedIN

The bank said it promptly activated its cyber incident response and containment protocols. It has also engaged an independent cybersecurity agency empanelled by CERT-In to conduct a comprehensive assessment and investigate the nature and extent of the suspected compromise.

SBI clarified that the incident has not materially affected its core business operations, financial performance or business continuity, and that its operations continue normally without disruption.

The bank said a detailed assessment is underway and appropriate remedial and preventive measures are being implemented as required. It added that it is closely monitoring the situation and will take necessary measures in accordance with applicable regulatory requirements.

(PSU Watch is India's Business News centre that places the spotlight on PSUs, Bureaucracy, Defence and Public Policy. 👉 Click to join our channel now: PSUWatch WhatsApp Channel. Prefer LinkedIn? Follow PSU Watch on LinkedIN. Click to stay connected on Twitter here and stay updated.)