State Bank of India is still investigating how customer information found on the dark web was exposed,
Chairman C. S. Setty said on November 3. At a post-earnings press conference, Setty said the bank’s immediate focus was containment, identifying the vulnerabilities behind the incident and remediating them.
Setty said SBI had carried out a cybersecurity drill that included an API sweep and vulnerability assessments, and that the work was ongoing. The bank is also working with the Indian Banks’ Association on a structured system for sharing incident information across the financial sector. The association is exploring a controlled sandbox for testing advanced AI models, according to reporting on Setty’s remarks.
SBI’s October 21 stock-exchange disclosure said the bank received alerts on October 16 from its threat-intelligence provider, the Defence Cyber Agency and CERT-In. A preliminary review of about 375,000 records circulating on the dark web identified 3,897 customer records containing personally identifiable information, including names, phone numbers, dates of birth, email and residential addresses, customer identifiers and loan-related metadata. SBI engaged an independent CERT-In-empanelled agency to investigate the source and scope.
The filing added a confirmed count to the earlier claims about a much larger SBI dataset, which had initially remained unverified. The bank has not yet publicly identified how the data left its systems or established the full extent of the exposure.
If this article helped you, please consider supporting our work. Every small contribution keeps Abijita.com independent and running.
