SBI Data Leak: It has been claimed that the data of 3.75 lakh State Bank of India (SBI) customers has been leaked. According to reports, a hacker group named ‘Siriusim’ claims to possess customers’ personal details, KYC documents, and account-opening paperwork…
SBI Data Breach: Cybersecurity concerns have emerged regarding the data of millions of State Bank of India (SBI) customers. A hacker group has claimed to possess records of 375,000 SBI customers. These reportedly include personal details, KYC-related documents, loan applications, and documents submitted for opening bank accounts. This claim has raised concerns about the potential misuse of customer information and the risk of online fraud.
According to a report by India Today, a hacker group named ‘Siriusim’ claimed to hold this data on a forum linked to the dark web. As of the time of writing, the bank has not provided an official confirmation regarding this matter. In the meantime, it is essential for customers to remain vigilant—rather than panicking—and to be cautious of suspicious calls, messages, or links claiming to be from the bank.
Claim of 375,000 Records and 2,722 PDF Files
The hacker group claims to possess a CSV file containing over 375,000 records, along with 2,722 PDF documents. A CSV file can be viewed as a spreadsheet. According to the report, the hacker group shared some documents, asserting that they belong to the bank’s customers. However, it is important to note a key distinction: a hacker’s claim to possess data is not the same as that data being authentic or current. For now, this development should be viewed strictly as an alleged data breach.
What are the risks if KYC and personal information are leaked?
‘KYC’ stands for ‘Know Your Customer’. Banks use this process to verify the identity and address of their customers. It may require the submission of identity-related documents and other essential information. If such information falls into the hands of a cybercriminal—and is authentic—it could be misused. This type of information can also be exploited to carry out targeted cyber fraud against individuals.
In such cases, it is crucial to understand that just because a caller possesses some of your personal information, it does not mean they are a genuine bank employee. Never share your OTP, ATM PIN, UPI PIN, internet banking password, or any confidential card details with anyone. Also, avoid clicking on suspicious links or installing unknown applications.
What should SBI customers do to protect themselves in the event of a data leak?
Rather than panicking when news of a data leak emerges, it is more important to ensure the security of your digital banking activities. Customers should keep the following points in mind:
- Do not share OTPs or PINs: If someone calls claiming to be from the bank and asks for an OTP, UPI PIN, or password, do not provide it.
- Avoid suspicious links: Do not click on unknown links—even if they claim to be for updating your KYC or keeping your account active.
- Keep banking apps secure: Ensure that your banking applications and phone software are kept up-to-date through official updates.
- If you fall victim to financial cyber fraud, inform the bank immediately and contact India’s national cybercrime helpline at 1930.
