State Bank of India Confirms Data Leak After 3,897 Customer Records Found on Dark Web
Summary: State Bank of India said in an October 21 stock-exchange filing that it identified 3,897 customer records containing personal information within a set of about 375,000 records available on the dark web, and does not yet know where the data came from. The bank was alerted October 16 by CERT-In and the Defense Cyber Agency, has engaged an independent cybersecurity firm from CERT-In's approved auditor panel, and says the incident has no material impact on its core business operations, financial performance or business continuity.
What's compelling: The listed fields - name, mobile number, date of birth, address, branch and CIF identifier - are enough for a caller to pass as the bank, and the bank has not said whether the 3,897 records belong to 3,897 different people or what the rest of the 375,000-record set contains.
Read the original at The Hacker News ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026