State Bank of India confirmed a data loss incident after thousands of customer records were identified on the dark web.
An analysis of the official filing outlines the exposed metadata, contact information, and the independent security audit launched following alerts from national cyber agencies.
The case came to light when Indian government security agencies notified the bank on October 16. The bank officially confirmed in a statement on October 21 that it was dealing with a data loss incident. In the list examined, which includes a total of about 375.000 records, 3.897 customer records containing personal information were found.
What items are included in the list?
The data appearing in the files includes names, email addresses, mobile phone numbers, dates of birth, home addresses, gender, as well as internal customer codes and loan-related information.
However, the bank clarifies that the list does not include bank account numbers, available balances, passwords, temporary security codes, payment cards or official government identification numbers. A forum account reported a leak of documents and personal data linked to the bank, including thousands of data sets and documents, while a test check of a sample of records showed valid phone numbers with profile photos.
READ ALSO
Security flaw in Palo Alto Networks systems allows attackers to bypass authentication
The course of the research
The bank has hired an independent cybersecurity firm to investigate the situation. According to the official statement, the incident does not affect the bank's operations, core activities or financial condition.
The announcement does not name anyone responsible, nor does it state who is behind the publication of the data.
G
Hacks.gr on Google
Set it as a preferred source for cybersecurity updates.
Preferred source
