The State Bank of India (SBI) has confirmed that customer balances are completely safe following a suspected data leak that exposed 3,897 customer records on the dark web. The bank has launched a thorough investigation and assured customers that the incident has not affected its core operations or financial stability.
- Only a very small number of customers were affected by the suspected data leak.
- The bank's IT infrastructure and business continuity remain intact.
- Customer financial assets and personal data protection are top priorities for SBI.
- SBI has activated cyber incident response protocols and engaged an independent cybersecurity agency.
- Customers are advised to stay alert for suspicious communications and protect their personal information.
What Happened in the SBI Data Leak?
SBI reported that a suspected cyber incident led to the exposure of customer information on the dark web. The leaked data included names, registered mobile numbers, dates of birth, gender, email addresses, residential addresses, branch information, Customer Information File (CIF) identifiers, lead IDs, and metadata related to loan and lead records.
The bank received alerts about this exposure on October 16 from its threat intelligence service provider, the Defence Cyber Agency, and the Indian Computer Emergency Response Team (CERT-In). Following these alerts, SBI promptly activated its cyber incident response and containment protocols.
How Is SBI Responding to the Incident?
SBI has engaged an independent cybersecurity agency empanelled by CERT-In to conduct a comprehensive assessment and investigate the suspected compromise. The bank is working to establish the authenticity and completeness of the exposed data, identify its source, and assess potential risks to customers and the bank.
The bank emphasized that the incident has not materially affected its IT infrastructure, core business operations, financial performance, or business continuity. SBI's core business functions continue to operate normally.
What Should Customers Do to Stay Safe?
SBI advises customers to remain vigilant against suspicious calls, emails, and messages claiming to be from the bank. Customers should never share their one-time passwords (OTPs), ATM PINs, or internet banking passwords with anyone.
Requests for KYC updates should be verified through official SBI channels only. If customers notice any unauthorized transactions, they should contact the bank immediately.
Suspected cyber fraud can also be reported through India's cybercrime helpline at 1930 or via the National Cyber Crime Reporting Portal.
Frequently Asked Questions
Q: Has SBI confirmed that customer money is safe?
A: Yes, SBI has assured that customer balances are completely safe and that the incident has not affected the bank's financial stability.
Q: How many customers were affected by the data leak?
A: The data leak affected a very small number of customers, with 3,897 customer records reportedly exposed.
Q: What kind of information was exposed in the leak?
A: Exposed information included names, mobile numbers, dates of birth, gender, email addresses, residential addresses, branch information, CIF identifiers, lead IDs, and metadata related to loans and leads.
Q: What steps has SBI taken after discovering the leak?
A: SBI activated cyber incident response protocols, engaged an independent cybersecurity agency, and is conducting a detailed investigation to assess the risks and source of the leak.
Q: How can customers protect themselves following this incident?
A: Customers should be cautious of suspicious communications, never share sensitive information like OTPs or passwords, verify KYC requests through official channels, and report any unauthorized transactions immediately.
