SBI reports cyberattack after nearly 3,900 customer records leaked on dark web
Cyberattack exposes 3,897 customer records on the dark web; bank launches probe, says operations and business continuity remain unaffected
The State Bank of India (SBI) has reported a cyberattack that led to the exposure of 3,897 customer records containing personally identifiable information on the dark web, according to a Reuters report. The leak has reportedly prompted the country’s largest lender to launch a detailed investigation into the incident.
In a regulatory filing on Wednesday (October 21), SBI said a preliminary assessment found that the leaked data included customer names, mobile numbers, dates of birth, email addresses, residential addresses, customer identifiers and certain loan-related records. According to Reuters, the bank said it had engaged an independent cybersecurity agency to examine the nature and extent of the breach.
Impact of leak
The lender maintained that the incident is not expected to have any material impact on its core banking operations, financial performance or business continuity.
SBI’s disclosure comes amid heightened concerns over cyber threats targeting financial institutions. The banking regulator has in recent years pushed lenders to strengthen cybersecurity safeguards as digital risks continue to grow.
According to Reuters, the bank said the investigation would seek to determine the source of the leak and assess the potential risks arising from the exposure of customer information. Authorities and cybersecurity experts are expected to scrutinise the incident as part of broader efforts to bolster data protection standards across the banking sector.