Loading
Loading
We use strictly necessary cookies to run this site, and analytics cookies to understand how it's used. See our Privacy Policy for details.
State Bank of India is investigating a suspected exposure of customer data found on the dark web.
Summary
A preliminary analysis of around 3.75 lakh records identified 3,897 records containing personal information, including names, mobile numbers, dates of birth, email IDs and residential addresses. The bank has activated its cyber incident response protocols and engaged an independent cybersecurity agency to assess the authenticity, source and extent of the exposure. SBI says its operations remain unaffected, but the investigation is ongoing and the identities of potentially affected customers have not yet been established.
The disclosure raises fresh concerns about banking data security and the risks of personal information being misused for fraud. Customers should remain vigilant, avoid suspicious links and never share OTPs, PINs or banking credentials.
KazaSec's take
Incidents like this rarely start with the headline event itself, they usually trace back to an exposed remote-access endpoint, an unpatched perimeter system, or a credential phished weeks earlier. The organizations that recover fastest are the ones that tested their defenses and their incident response plan before they needed them.
Coverage details
We've archived 3 other articles touching the same topic (customer personal information, sbi latest news, sbi cyber attack) , see the full security news archive.
Relevant from KazaSec
More coverage on this topic
We help organizations find and fix the gaps before they make headlines.