SBI notifies customers after finding 3,897 records exposed
Original title: SBI Notifies Customers Impacted by the Recent Cyber Incident
SBI reviewed about 375,000 dark-web records and says balances are safe, with no confirmed core-system intrusion.
State Bank of India has emailed and messaged customers whose information it identified in a cyber incident, according to an October 23 advisory. A preliminary review of about 375,000 dark-web records found 3,897 customer records with personal data. SBI says funds and balances remain safe, banking continued, and investigators have not confirmed entry into core systems or a software flaw. Alerts came on October 16 from its threat-intelligence provider, the Defense Cyber Agency and CERT-In.
Unconfirmed: How the data was obtained is unconfirmed, and an earlier unverified breach claim is separate from SBI’s findings.
- Exposed fields reportedly include names, mobiles, birth dates, emails and addresses.
- Records also included gender, branch details, CIF identifiers and loan-inquiry data.
- Reporting does not show passwords, PINs, OTPs or transaction credentials were taken.
- SBI lists report.phishing@sbi.co.in and India’s cybercrime helpline 1930.
Impact: Personal and loan-inquiry data for 3,897 customers exposed
- 1.Never share passwords, PINs or one-time passwords.
- 2.Report incidents to report.phishing@sbi.co.in or helpline 1930.
- 3.Verify unexpected bank messages through official channels.
- Victims
- State Bank of India
- Organizations
- CERT-InDefense Cyber Agency
- Countries
- India
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| report.phishing@sbi.co.in | d transactions. SBI’s official cybersecurity guidance lists report.phishing@sbi.co.in for reporting cyber incidents and directs users to India’s |
From the original article
2 min read at cybersecuritynews.com
State Bank of India (SBI) has individually notified customers whose information was identified in a recent cyber incident, sending alerts through email and WhatsApp. In its latest advisory on October 23, the bank said customer account balances and funds remain safe while investigators examine the suspected exposure of personal information found on the dark web. […]
By Abinaya · cybersecuritynews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.