SBI Notifies Customers Impacted by the Recent Cyber Incident

State Bank of India (SBI) has individually notified customers whose information was identified in a recent cyber incident, sending alerts through email and WhatsApp.

In its latest advisory on October 23, the bank said customer account balances and funds remain safe while investigators examine the suspected exposure of personal information found on the dark web.

The update shifts the bank’s response from an initial public disclosure to direct communication with customers. According to The Economic Times, SBI said it had informed all customers whose data was identified as involved.

The bank also warned users to stay alert for suspicious calls, messages, and emails, and never share passwords, PINs, or one-time passwords.

SBI’s preliminary review examined approximately 375,000 records available on the dark web and identified 3,897 customer records containing personally identifiable information.

These figures represent different measures. The larger number describes the records reviewed, not a confirmed count of affected SBI customers or compromised bank accounts.

SBI Notifies Customers Impacted By Cyber Incident

The information reportedly included names, registered mobile numbers, dates of birth, email addresses and home addresses. Other fields included gender, branch details, Customer Information File identifiers, and information linked to loan inquiries and lead records. These details can identify customers and provide context about their banking relationships.

As covered in Cybersecurity News’ earlier report on the SBI data loss incident, the disclosure did not establish how the information was obtained.

It also did not confirm that attackers had entered SBI’s core banking systems. No publicly identified entry point, exploited software flaw, or malware family explained the incident.

SBI received alerts on October 16 from its threat intelligence service provider, the Defense Cyber Agency, and the Indian Computer Emergency Response Team, known as CERT-In.

The bank activated its incident response and containment procedures and appointed an independent cybersecurity agency impaneled with CERT-In to investigate.

Investigators are examining the authenticity, source and extent of the exposed information. SBI has said the incident caused no material impact on its core operations, financial performance or business continuity. Banking services continued without disruption, according to the bank’s disclosure.

An earlier unverified claim about an SBI data breach alleged that customer records and banking documents had been posted online. Those allegations should remain separate from SBI’s confirmed findings while the investigation continues.

Personal data exposure does not automatically mean an account has been taken over. Available reporting does not establish that passwords, PINs, OTPs, or transaction credentials were compromised. However, exposed contact and loan details could help criminals create convincing messages that appear to come from the bank.

Customers should verify unexpected notifications through official banking channels rather than trust a message because it contains accurate personal details. They should avoid unfamiliar links and check statements for unauthorized transactions.

SBI’s official cybersecurity guidance lists [email protected] for reporting cyber incidents and directs users to India’s cybercrime helpline, 1930. The bank’s latest warning stresses that customers must never disclose authentication codes or banking passwords to anyone.

Update defenses against new malware as soon as it appears. Integrate TI Feeds with data from 16K SOCs.

The post SBI Notifies Customers Impacted by the Recent Cyber Incident appeared first on Cyber Security News.