Breaking
A hacking group allegedly claims to have stolen 3.75 lakh SBI customer records. The data breach claim remains unverified as cybersecurity concerns grow.
Concerns have emerged over the security of customer data at the State Bank of India (SBI), the country’s largest public sector bank, after a hacking group allegedly claimed to have stolen sensitive customer information. The group, identified as ‘Siriusim’, is said to possess personal details, loan applications and account-opening documents belonging to SBI customers. The claim was brought to light by cybersecurity monitoring group CyberPulse56 through social media.
According to CyberPulse56, the hackers allegedly possess CSV files containing around 3.75 lakh records and approximately 2,722 PDF documents. The data is said to include customers’ names, addresses, phone numbers, loan applications and other financial documents.
However, the authenticity of these claims remains unverified. There has been no official confirmation so far that SBI’s systems were breached or that the documents originated from the bank’s servers. The number of records cited also does not necessarily indicate the number of individual customers affected.
Cybersecurity experts would need to establish the authenticity and source of the data, as well as the extent of any potential exposure, before the claims can be treated as a confirmed breach.
If the data is genuine, it could potentially be exploited by cybercriminals to target customers through phishing messages, fraudulent phone calls and fake loan offers. Personal information could also be used for identity theft and other financial scams.
Information such as names, contact details and loan-related documents can help fraudsters craft convincing messages that appear to come from legitimate financial institutions. However, the alleged exposure of customer records alone does not establish that bank accounts, passwords or transaction systems have been compromised.
SBI customers should monitor their bank transactions and exercise caution when responding to unsolicited calls, messages or emails claiming to be from bank officials. Customers should never disclose their passwords, ATM PINs or one-time passwords (OTPs) to anyone.
They should also avoid clicking on suspicious links or sharing personal and financial information on unverified websites. Any suspicious transaction should be reported to the bank immediately. Victims of financial cyber fraud in India can contact the national cybercrime helpline at 1930.
The alleged incident comes amid growing concerns over cybersecurity in the banking sector as digital financial services continue to expand. Protecting customer information remains a critical responsibility for financial institutions.
Until the claims are independently verified and an official statement establishes the nature and extent of any breach, the alleged SBI data theft should be treated as an unconfirmed cybersecurity claim.
