Play store
NEW DELHI: India’s largest lender, State Bank of India (SBI), said on Wednesday that a cyberattack had compromised customer data, with 3,897 records reportedly appearing on the dark web.
The exposed information included customers’ names, registered mobile numbers, dates of birth, gender, email addresses and residential addresses, raising concerns over the potential misuse of personal information.
SBI said it had activated its cyber incident response and containment protocols to address the incident. The bank has also engaged an independent cybersecurity agency to conduct a comprehensive assessment and investigate the nature and extent of the alleged data breach.
The investigation is expected to establish how the information was accessed, the circumstances surrounding its disclosure and whether additional customer records were affected.
The bank said the incident was not expected to have any material impact on its core business operations, financial performance or business continuity.
However, the exposure of personal information can increase the risk of phishing, identity theft and other forms of fraud, particularly if criminals use the leaked details to impersonate bank officials or target customers with fraudulent messages and calls.
Customers are generally advised to remain alert to unsolicited communications, avoid clicking suspicious links and never disclose passwords, one-time passwords (OTPs), PINs or other banking credentials in response to unexpected requests.
SBI’s investigation will be crucial in determining the full extent of the incident and whether further protective measures are needed to safeguard customer information.