State Bank of India Confirms Data Leak After 3,897 Customer Records Found on Dark Web
State Bank of India has identified 3,897 customer records containing personal information in a set of about 375,000 records available on the dark web, and it does not yet know where the data came from. The state-owned bank, India's largest, said in a stock-exchange filing dated October 21 that it "has experienced an incident involving the loss of certain data." The count is
State Bank of India (SBI) has confirmed the discovery of 3,897 customer records containing personal information on the dark web, though the origin of the data remains unknown. The bank, India's largest, disclosed the incident on October 21 via a stock-exchange filing. The preliminary count suggests the exposure of mobile numbers, dates of birth, names, genders, email addresses, residential addresses, branch and CIF identifiers, lead IDs, and metadata associated with loan/lead records.
The bank has not determined whether the data is authentic, the extent of the exposure, or the potential risks to customers. The affected information does not include account numbers, balances, passwords, one-time passcodes, card details, or government identity numbers like PAN or Aadhaar. The risk lies in the possibility of impersonation, where attackers could use the provided details to impersonate customers.
SBI identified the data breach via its threat intelligence provider, CERT-In, and the Defense Cyber Agency. The incident does not appear to have impacted the bank's core operations or financial performance. The bank has not revealed the source of the data or the identity of those responsible for the breach.
Written by urgent.news from The Hacker News's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
