State Bank of India confirms 3,897 customer records on dark web
Original title: State Bank of India Confirms Data Leak After 3,897 Customer Records Found on Dark Web
The October 21 filing says authenticity and the source remain unknown, and listed fields omit account numbers, passwords and Aadhaar.
State Bank of India told exchanges on October 21 that it found 3,897 customer records with personal data inside about 375,000 dark-web records. CERT-In and the Defense Cyber Agency alerted the bank on October 16. SBI started incident response, hired an approved auditor, and says operations and finances are unaffected. It has not confirmed the records are genuine or that an SBI system was breached.
Unconfirmed: The bank has not confirmed authenticity, the data source, a system breach, or any link to the Siriusim listing.
- Listed fields include names, mobiles, birth dates, addresses, emails, branch and CIF IDs.
- The 3,897 records are roughly one in 100 of the set examined.
- CyberPulse56 attributed 375,000 CSV rows and 2,722 PDFs to an actor named Siriusim.
- Four BreachForums samples had valid phones; one WhatsApp photo matched a KYC image.
- SBI has not said whether affected customers will be notified.
Impact: Names, contacts, addresses and customer IDs may aid impersonation
- 1.Report suspected bank impersonation to report.phishing@sbi.co.in or India's helpline 1930.
- Threat actors
- Siriusim
- Victims
- State Bank of India
- Organizations
- CERT-InDefense Cyber Agency
- Countries
- India
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| report.phishing@sbi.co.in | ed in June, tells customers to report any cyber incident to report.phishing@sbi.co.in or the national cybercrime helpline, 1930. That is general |
From the original article
3 min read at thehackernews.com
State Bank of India has identified 3,897 customer records containing personal information in a set of about 375,000 records available on the dark web, and it does not yet know where the data came from. The state-owned bank, India's largest, said in a stock-exchange filing dated October 21 that it "has experienced an incident involving the loss of certain data." The count is
thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.