NOB_Mumbai: State Bank of India (SBI), India’s largest public sector bank, has confirmed a serious cyber incident. The personal information of thousands of customers has surfaced on the dark web, the bank has officially confirmed in a regulatory filing to stock exchanges.
What Happened?
A hacker group named ‘Siriusim’ claimed to have posted nearly 3.75 lakh records and 2,700 loan application PDFs on the dark web. After preliminary investigation by the bank’s cyber teams, it was found that Personally Identifiable Information (PII) of 3,897 customers was compromised.
What Data Was Leaked?
- Customer names, gender, date of birth
- Registered mobile numbers, email IDs
- Residential addresses
- Customer Information File (CIF) IDs, home branch details
- Loan metadata
Money Safe – SBI Clarifies:
SBI has clarified that customers’ money is completely safe. No net banking passwords, transaction PINs, or credit/debit card CVVs were leaked, only personal information was compromised. Hence there is no threat to account security.
Cyber Agencies in Action:
On October 16, the bank’s threat intelligence service provider, Defence Cyber Agency and Government of India’s cybersecurity arm CERT-In detected the leak and alerted the bank. SBI has launched measures to contain the leak and has engaged an independent forensic cyber investigation agency to find the source.
No Impact on Business:
SBI stated that this cyber incident will have no adverse impact on daily operations, digital services or financial performance. However, SBI shares fell 0.88% on BSE after the news.
