On Wednesday, the State Bank of India announced that 3,897 customer records had been found on the dark web, a discovery flagged by its Threat Intelligence Service on October 16. The alert came from the Defence Cyber Agency and CERT‑In, two of the country’s top cyber‑security watchdogs. The bank confirmed the breach during a filing with the stock exchange.
The exposed data includes mobile numbers, dates of birth, names, gender, email addresses, residential addresses, branch and CIF identifiers, lead IDs, and loan‑metadata.
SBI has activated its cyber‑incident response. It has engaged an independent CERT‑In‑empanelled agency to assess the breach. SBI reassures that core banking functions are intact.
An anonymous hacker group, 'Siriusim', claimed possession of 380,000 entries and 2,722 PDFs tied to the bank. The authenticity of that dataset remains unverified.
The Reserve Bank of India tightened cyber‑security mandates for banks last month. SBI will monitor the situation and implement remedial measures in line with regulatory requirements.
A branch manager in Mumbai said the bank’s swift communication gave customers confidence amid the scare.