SBI investigates dark web leak of 3.8 lakh records

State Bank of India is currently investigating a suspected data breach involving customer information found online

The bank was alerted on October 16 by its threat-intelligence service provider, the Defence Cyber Agency and the Indian Computer Emergency Response Team (CERT-In) about the suspected exposure of customer data, the lender said in an exchange filing.

SBI said it immediately activated its cyber-incident response and containment protocols and engaged an independent CERT-In-empanelled cybersecurity agency to investigate the nature and extent of the suspected compromise. "A detailed investigation was required to establish the authenticity and completeness of the exposed data, determine the potential source and extent of the exposure, and assess the associated risks to customers and the Bank," SBI said on Wednesday.

SBI said preliminary analysis of approximately 375,000 records available on the dark web identified 3,897 customer records containing personally identifiable information (PII).

The exposed information reportedly included registered mobile numbers, dates of birth, names, gender, email and residential addresses, branch and customer information file (CIF) identifiers, lead IDs and metadata associated with loan and lead records.

The lender said the incident has not had any material impact on its core business operations, financial performance or business continuity, with operations continuing normally.