SBI confirms data of 3,897 customers exposed on dark web, silent on whether customers were informed
SBI disclosed to the BSE and NSE on October 21 that customer details including mobile numbers, dates of birth, names, emails and home addresses were found among approximately 375,000 leaked records on the dark web. The bank received the alert on October 16 from Defence Cyber Agency and CERT-In. SBI stated the breach would have no material business impact, and India's data notification law will not take effect until May 2027.
Key points
- 3,897 SBI customer records exposed on dark web
- Leaked data includes PII: names, phone numbers, addresses, DOB
- No confirmation whether affected customers were notified
- India's data privacy notification law takes effect May 2027
Summary and key points written by AI from the headline and a short excerpt, so they can be incomplete or wrong. MediaNama did the reporting; read the original for the full story.
Read the full story at MediaNama