SBI says it informed customers after details of nearly 3,900 account holders leaked in cyberattack

The State Bank of India on Friday said it had individually informed customers whose personal data was leaked on the dark web following a cyberattack, using email or WhatsApp.

The cyberattack on Wednesday had led to the leak of about 3.75 lakh customer records on the dark web, of which 3,897 contained personally identifiable information.

The bank’s statement came after digital rights organisation Internet Freedom Foundation flagged that SBI had informed stock exchanges about the data leak but had not notified affected customers.

In its statement on Friday, the SBI said that customers’ account balances and funds were safe. “Customers are advised to follow safe digital banking practices, never share their OTP, PIN or password with anyone, and remain vigilant against suspicious calls, messages and emails,” it added.

In July, customer data and internal documents from state-run Bank of Baroda were also leaked on the dark web, Reuters reported.

The Reserve Bank of India has repeatedly warned lenders about cybersecurity risks that could affect financial stability.

Edited by Tanya Shrivastava.
...

Read more