SBI data breach: This is what India’s largest public sector bank told customers as 3,897 records were flagged as a cyber incident | Today’s news
State Bank of India (SBI) has begun individually notifying customers whose information was identified in a suspected cyber incident, while assuring account holders that their funds remain safe as the bank investigates possible exposure of personal data.
“Following our earlier post regarding the recent cyber incident, the bank has individually informed all customers whose data has been identified as affected via email and/or WhatsApp,” SBI said in a customer alert on Friday.
The bank reiterated that “your account balances and funds are safe with us” and urged customers to remain vigilant when using digital banking services.
Read also | Good news! Pre-Diwali DA trip gift for this state government employees
SBI data breach: What information may have been exposed?
In its advisory, SBI urged customers to exercise caution when handling sensitive banking information.
“Customers are advised to follow safe digital banking practices, never share their OTP, PIN or password with anyone and remain vigilant against suspicious calls, messages and emails,” the advisory said.
The communication follows the bank’s announcement of a suspected data breach involving customer records allegedly found on the dark web.
According to a stock exchange filing, SBI’s preliminary examination of approximately 3.75 lakh records revealed 3,897 records containing personally identifiable information.
Read also | ₹ 10,000 per month in Post Office RD vs PPF: Comparison of returns
The information allegedly included customer names, registered mobile numbers, dates of birth, email IDs and residential addresses. The records also contained identifying information about branches and customers, along with metadata related to loan and lead records.
Identification of personal data in the records does not in itself prove that customer bank accounts or funds have been accessed or compromised.
SBI cyber incident: How the bank responded
The SBI received an alert about the suspected threat on October 16 from its threat intelligence provider, the Defense Cyber Agency, and the Indian Computer Emergency Response Team (CERT-In).
Following the alerts, the bank activated its cyber incident response and containment protocols. It has also commissioned an independent cyber security agency linked to CERT-In to investigate the incident.
The investigation is expected to establish the authenticity and extent of information that may have been disclosed, its possible source and the risks associated with the incident.
Read also | Explanation: What is Shamonda virus? WHO says first human case reported in France
Is your SBI account balance safe?
SBI said the incident had no material impact on its core business operations, financial performance or business continuity. The bank also assured customers that their account balances and funds are safe.
However, the investigation is ongoing and the extent and consequences of the suspected data exposure have not yet been fully determined.
Customers should avoid sharing one-time passwords (OTPs), PINs or passwords with anyone, including callers claiming to represent the bank. They should also be careful with unexpected links, messages and emails asking for personal or financial information.
Customers who receive a notification from SBI should verify that it is genuine before responding to it. Any suspicious communication or suspected unauthorized transaction should be reported to the bank through its official channels.
