SBI Finds 3,897 Records With Personal Data in Review

State Bank of India said a preliminary review of material found on the dark web identified 3,897 records containing personal information, as it investigates the suspected exposure’s source and extent. In a filing dated October 21, the bank said it had screened approximately 375,000 records. That is the number of records reviewed, not a confirmed count of affected customers. SBI has not said how many distinct people the 3,897 records represent. The information reportedly included names, registered mobile numbers, dates of birth, gender, email and residential addresses, as well as branch and customer information file identifiers, lead IDs and metadata associated with loan and lead records. The bank said further assessment is needed to establish whether the data is authentic and complete and to determine its potential source and scope. SBI said it received alerts on October 16 from its threat-intelligence service provider, the Defence Cyber Agency and the Indian Computer Emergency Response Team, known as CERT-In. The bank activated incident-response and containment procedures and engaged an independent cybersecurity agency to conduct an assessment. It did not identify an attacker...