The SBI Data Breach: State Bank of India has recently flagged a suspected data exposure. A hacker group, Siriusim, claimed to have leaked 3.75 lakh customer records on BreachForums.
The SBI bank states that in an early investigation, it found that unauthorised individuals (such as hackers or unauthorised insiders) may have gained access to sensitive personal data belonging to 3,897 customers. This data contained personally identifiable information (PII) that was compromised.
The exposed details reportedly include names, mobile numbers, dates of birth, email IDs and residential addresses.
Something important to note is that you do not need to panic. A data leak does not automatically mean your bank account has been hacked.
If you are wondering how this will help hackers, it can give scammers the information they need to make fraudulent calls and messages appear genuine and serious.
Here is what customers should know and do next.
What Happened In The SBI Data Breach?
-
Hacker's Claim: This was an unexpected data breach. An anonymous hacker group, Siriusim, allegedly claimed responsibility for exposing 3.75 lakh customer records and 2,722 PDF files on BreachForums.
Related Stories
SBI's Preliminary Findings: According to reports,The bank reportedly identified 3,897 customer records containing personally identifiable information (PII) as compromised.
Investigation Initiated: After the incident, SBI has activated its cyber incident response plan and engaged an independent agency to investigate the incident.
Difference in Figures: The 3.75 lakh figure reflects the hacker group's claim, while 3,897 records represent the number SBI reportedly identified as compromised during its preliminary assessment.
What Data Was Exposed in the SBI Data Leak?
According to media reports, the exposed information reportedly includes personal details and banking-related application metadata.
|
Data Category
|
Information Reportedly Exposed
|
|
Personal details
|
Full names and gender
|
|
Contact information
|
Registered mobile numbers and email IDs
|
|
Personal records
|
Dates of birth and residential addresses
|
|
Banking identifiers
|
Branch details and Customer Information File (CIF) identifiers
|
|
Loan-related information
|
Loan application lead IDs
|
This information can be valuable to fraudsters even if it does not include account passwords or PINs. When scammers know a customer's name, phone number and loan-related details, they can make fraudulent communications sound more credible.
Is Your SBI Bank Details At Risk?
The reported data exposure at SBI does not mean your data has also been hacked. You should not panic, and this does not mean hackers can access your account.
There is also an important distinction between personal information and financial authentication credentials. The available reports do not establish that account passwords, NetBanking PINs or UPI PINs were compromised in this incident. Customers should nevertheless remain alert while the investigation continues.
How To Protect Your Data After The SBI Data Leak
Customers can take the following steps to reduce the risk of fraud and protect their banking information.
|
No.
|
Safety Measure
|
What You Should Do
|
|
1
|
Never Share OTPs or UPI PINs
|
Never disclose OTPs, UPI PINs, NetBanking passwords or other authentication credentials to callers claiming to represent SBI.
|
|
2
|
Verify Calls and Messages
|
Be cautious of unexpected calls about KYC updates, loan approvals, blocked accounts or urgent verification. Confirm requests through official SBI channels.
|
|
3
|
Monitor Bank Transactions
|
Check account statements regularly and enable SMS and email transaction alerts, where available. Report unauthorised transactions immediately.
|
|
4
|
Avoid Suspicious Links and Applications
|
Do not click unknown links or install applications at the request of unverified callers. Never share your screen with suspicious contacts.
|
|
5
|
Secure Your NetBanking Account
|
Use a strong, unique password, change it if you suspect it has been compromised, and keep banking applications and phone software updated.
|
|
6
|
Verify SBI Customer Care Details
|
Obtain customer-care numbers from SBI's official website. Avoid relying on numbers shared by unknown callers, social media posts or search advertisements.
|
|
7
|
Report Suspected Banking Fraud
|
Contact SBI immediately, call India's national cybercrime helpline at 1930, and file a complaint through the National Cyber Crime Reporting Portal. Preserve relevant messages, screenshots and transaction details.
|