SBI finds 3,897 customer records on dark web after hacker’s claim
SBI is investigating a suspected data breach after alerts from CERT-In and the Defence Cyber Agency, disclosing the probe in a stock exchange filing.
State Bank of India (SBI) has uncovered 3,897 customer records containing personal information on the dark web, following a claim made by a threat actor named "Siriusim". The bank received alerts from its threat intelligence service provider, the Defence Cyber Agency and the Indian Computer Emergency Response Team (CERT-In), pointing to a possible exposure of customer information.
SBI has launched a detailed cybersecurity investigation and activated its cyber incident response protocols, engaging an independent cybersecurity agency to verify the authenticity of the leaked records, trace the source of the potential exposure, and assess the associated security risks. The disclosure follows the claim made on BreachForums, a site known for trading stolen data, where Siriusim posted a CSV file containing 3.75 lakh rows of customer records and 2,722 PDF documents.
SBI has not yet disclosed how many of the 3,897 records could be linked to current customers, but the records included identity verification documents, making the potential exposure more consequential than a typical leak of names and phone numbers.
Brief written by urgent.news from YourStory's own syndicated text. Machine-written — may contain errors; check the original before relying on it.
