The State Bank of India (SBI) has confirmed a cyber incident involving the suspected exposure of 3,897 customer records on the dark web. The exposed information reportedly includes names, phone numbers, identification details and loan-related information.
According to SBI’s filing with stock exchanges, the bank received alerts about the suspected data exposure on October 16. The alerts came from its threat intelligence service provider, the Defence Cyber Agency and the Indian Computer Emergency Response Team (CERT-In).
The incident has raised concerns about the safety of sensitive banking information and the risks customers may face when personal details become publicly accessible online.
However, SBI stated that the incident had not materially affected its core operations, financial performance or business continuity. The bank’s disclosure focused on the suspected exposure of customer information rather than any major disruption to its banking services.
The reported incident highlights the growing threat of cyberattacks against financial institutions. Personal information exposed online can potentially be misused for phishing attempts, identity fraud and other scams.
Customers should remain alert to unexpected calls, messages or emails requesting banking details, passwords, PINs or one-time passwords. They should avoid clicking suspicious links and report unusual account activity through official SBI channels.
The disclosure underscores the importance of strong cybersecurity measures and continued monitoring to protect customer information from online threats.