State Bank of India (SBI) confirmed a dark web data exposure flagged by CERT-In and the Defence Cyber Agency. Out of ~3.75 lakh total records analyzed, 3,897 customer records contained Personally Identifiable Information (PII). SBI activated containment protocols and stated core banking operations remain unaffected.
The exposed information reportedly included customers’ registered mobile numbers, dates of birth, names, gender, email addresses, residential addresses, branch and CIF identifiers, lead IDs, and metadata associated with loan/lead records and other related files.
"We wish to submit that this does not have any material impact on Bank’s Core business operations, financial performance or business continuity. The Bank’s core business functions continue to operate normally without disruptions,” the Bank said.
A detailed assessment is currently underway and appropriate remedial and preventive measures are being implemented as required, it added. ,
“We reassure that the Bank continues to monitor the situation closely and take all appropriate measures in accordance with applicable regulatory requirements,” SBI said.
