SBI Assures Customers After Data Leak, Funds Remain Secure

New Delhi, October 23 (Daily Kiran) : The State Bank of India (SBI), the country’s largest bank, issued a statement on Friday regarding a cyber incident that led to the leak of data for 3,897 customers on the dark web. The bank assured that there has been no loss to the funds deposited in customers’ accounts.

In a message shared on the social media platform X, SBI stated, “Following our previous post about the recent cyber event, the bank has individually notified all customers whose data was affected via email and WhatsApp.” The statement emphasized, “We reiterate that your account balance and funds are secure with us.”

The bank advised customers to adopt secure digital banking practices. It urged them not to share their OTPs, PINs, or passwords with anyone and to remain vigilant against suspicious calls, messages, or emails.

This assurance comes after SBI confirmed earlier this week that customer data had been leaked, with details of 3,897 clients published on the dark web. The bank received an alert from its threat intelligence service provider, the Defence Cyber Agency, and CERT-In regarding the potential data leak.

In its exchange filing, SBI reported that an initial analysis of approximately 375,000 records on the dark web revealed 3,897 customer records containing sensitive personal information. This information includes registered mobile numbers, birth dates, names, genders, email addresses, home addresses, branch details, CIF identifiers, lead IDs, and metadata related to loans or leads.

SBI stated that it has activated its Cyber Incident Response and Containment Protocols immediately. Additionally, it has appointed an independent cybersecurity agency recognized by CERT-In to conduct a thorough investigation into the nature and extent of the data leak.

The bank is currently undertaking a detailed inquiry to verify the authenticity and completeness of the leaked data, identify potential sources and scope, and assess associated risks.