Overview
- SBI told the stock exchange it received an alert on October 16 from a threat intelligence provider, the Defence Cyber Agency and CERT-In about possible customer data exposure.
- A hacker group using the alias Siriusim posted a claim on BreachForums and was reported by CyberPulse to have offered roughly 3.75 lakh CSV records and 2,722 PDFs linked to SBI customers, a figure SBI has not verified.
- SBI’s preliminary review of the posted dataset identified 3,897 customer records that appear to contain personal information such as names, registered mobile numbers, dates of birth, emails, residential addresses and some loan or branch IDs.
- Cybersecurity firms warn that if the files are authentic the exposed fields could enable identity theft, fake loan applications, phishing and other financial fraud targeting affected customers.
- SBI says it has contained the issue, is working with cyber agencies and threat intelligence partners on a detailed investigation, and will follow regulatory disclosure and customer notification steps as forensic work establishes origin and scope.