New Delhi: State Bank of India (SBI) is investigating the suspected exposure of 3,897 customer records containing personally identifiable information on the dark web, following alerts from its threat intelligence service provider, the Defence Cyber Agency and the Indian Computer Emergency Response Team (CERT-In) on October 16.
In a regulatory filing on Wednesday, SBI said a preliminary analysis of approximately 3.75 lakh records available on the dark web had identified 3,897 customer records containing sensitive personal information.
The potentially exposed data includes customers’ names, registered mobile numbers, dates of birth, gender, email addresses and residential addresses.
According to the bank, the information also reportedly contained branch details, Customer Information File (CIF) identifiers, lead IDs and metadata linked to loan and lead records, along with other related files.
SBI has initiated an investigation to assess the nature and extent of the suspected data exposure and determine the circumstances surrounding the incident.
The bank stated that there had been no impact on business continuity, indicating that its regular operations remained unaffected at the time of the disclosure.
Further details are awaited as the investigation progresses.
