Ethical Hacking News
State Bank of India has confirmed that 3,897 customer records, containing sensitive personal information, were found on the dark web. The bank is investigating the source of the data leak and taking measures to prevent similar incidents in the future. This breach raises serious concerns about the security of customer information and the trust that customers have placed in the bank.
State Bank of India (SBI) has confirmed that 3,897 customer records were compromised, including personal information, on the dark web. The exposed information includes customers' registered mobile numbers, dates of birth, names, and other sensitive data. The incident was reported by CERT-In, India's national computer emergency response team, and the Defense Cyber Agency. The source of the data leak remains unknown, and it is unclear whether the breach was caused by a hack or a legitimate leak. The bank has not disclosed the incident to customers, despite identifying the compromised records. The incident raises serious concerns about the security of customer information and the trust placed in the bank. The bank's failure to disclose the incident raises questions about transparency and accountability. The bank is taking steps to investigate, assess damage, and prevent similar incidents in the future.
In a shocking revelation, the State Bank of India (SBI) has confirmed that sensitive customer data, including personal information, was found on the dark web. The bank has identified 3,897 customer records, out of a total of 375,000 records, that were compromised, and has raised concerns about the potential security breach. According to the bank's filing, the exposed information included customers' registered mobile numbers, dates of birth, names, gender, email addresses, residential addresses, branch and CIF identifiers, lead IDs, and metadata associated with loan/lead records.
The incident, which was reported on October 16, 2026, was brought to the bank's attention by its threat intelligence provider, CERT-In, India's national computer emergency response team, and the Defense Cyber Agency. The bank has activated its incident response and containment procedures and engaged an independent cybersecurity firm from CERT-In's panel of approved security auditors to assess the situation.
However, the bank has not disclosed the source of the data leak, and it is unclear whether the breach was caused by a hack or a legitimate leak. The bank's security page advises customers to report any cyber incidents to a specific email address, but it has not informed customers about this incident, despite the fact that the bank has identified 3,897 records.
The exposure of sensitive data on the dark web raises serious concerns about the security of customer information and the trust that customers have placed in the bank. It is essential that the bank takes immediate action to investigate the source of the data leak, assess the potential damage, and take measures to prevent similar incidents in the future.
Furthermore, the incident highlights the vulnerability of financial institutions to cyber threats. The fact that the bank's security measures were breached and sensitive data was exposed on the dark web is a serious concern. The bank's failure to disclose the incident to customers raises questions about the bank's transparency and accountability.
The SBI's incident response and containment procedures are crucial in preventing further damage and minimizing the impact of the breach. The engagement of an independent cybersecurity firm is a positive step towards ensuring that the bank takes the necessary measures to secure its systems.
In conclusion, the exposure of sensitive data on the dark web by the State Bank of India is a serious breach of trust for the bank and its customers. The bank must take immediate action to investigate the source of the data leak, assess the potential damage, and take measures to prevent similar incidents in the future.
Related Information:
https://www.ethicalhackingnews.com/articles/Exposure-of-Sensitive-Data-on-the-Dark-Web-A-Serious-Breach-of-Trust-for-State-Bank-of-India-ehn.shtml
https://thehackernews.com/2026/10/state-bank-of-india-confirms-data-leak.html
Published: Wed Oct 21 02:58:52 2026 by llama3.2 3B Q4_K_M
