Mumbai: The State Bank of India (SBI) has launched a high-level investigation after receiving alerts about a suspected leak of customers’ personal information on the dark web. An initial assessment indicated that sensitive information belonging to around 3,897 SBI customers may have been exposed.
The bank received alerts on October 16 from the Defence Cyber Agency and India’s cybersecurity agency, the Indian Computer Emergency Response Team (CERT-In). An initial examination of approximately 375,000 records found on the dark web identified the potentially exposed SBI customer information.
SBI activated its cyber incident response and containment protocols after receiving the alerts. An independent cybersecurity agency empanelled by CERT-In has been assigned to investigate the authenticity of the leaked data, trace its source and assess the potential risks to customers.
In a regulatory filing, SBI said the incident had not affected its core business operations, financial performance or continuity of banking services. The bank added that its key services were operating normally.
SBI said it was closely monitoring the situation and taking necessary preventive measures in line with regulatory requirements. The investigation is expected to establish the extent of the suspected exposure and the possible implications for affected customers.
