Technology2 min read

Hacker group claims access to 3.8 lakh SBI data entries

By · Via Times of India · Published by Everything Blog

In short

An unidentified hacker group, Siriusim, has claimed to have obtained 3.8 lakh confidential customer information entries from State Bank of India (SBI) through a breach. CyberPulse56 reported the claim on October 16, 2023, stating that the group possesses about 3.8 lakh data entries in CSV format and 2,722 pdf documents. CyberPulse56 warned that the information could be exploited for identity theft, financial fraud, targeted phishing attacks, and fraudulent loan applications. This claim comes amid concerns over cybersecurity risks in India's financial sector, following the Reserve Bank of India's (RBI) recent cybersecurity requirements for commercial banks.

Key points

  • An unidentified hacker group, Siriusim, has claimed to have obtained 3.8 lakh confidentia…: An unidentified hacker group, Siriusim, has claimed to have obtained 3.8 lakh confidential customer information entries from State Bank of India (SBI) through a breach.
  • CyberPulse56 reported the claim on October 16, 2023, stating that the group possesses abo…: CyberPulse56 reported the claim on October 16, 2023, stating that the group possesses about 3.8 lakh data entries in CSV format and 2,722 pdf documents.
  • CyberPulse56 warned that the information could be exploited for identity theft, financial…: CyberPulse56 warned that the information could be exploited for identity theft, financial fraud, targeted phishing attacks, and fraudulent loan applications.

Sources checked by our analysis pipeline: 1

NEW DELHI: An unidentified hacker group operating under the name ‘Siriusim’ has claimed to have obtained confidential customer information allegedly linked to State Bank of India, including personal details, loan applications and account-opening documents.

The claim was highlighted by cybersecurity monitoring account CyberPulse56 in a post on social media platform X. According to the account, the group purportedly possesses about 3.8 lakh data entries in CSV format and 2,722 pdf documents associated with the country’s largest public sector lender.

The allegedly exposed dataset is said to contain customers’ personal information, residential addresses, loan applications, supporting documents and other applicationrelated records. CyberPulse56 first reported the claim on Oct 16, stating that Siriusim had presented the material as its first disclosure of the dataset.

However, the authenticity and origin of the alleged data exposure remain unverified. The reported number of entries also does not establish how many individual customers may have been affected, as multiple records could potentially relate to the same person. There has been no independent confirmation that SBI’s systems were compromised or that the documents originated directly from the bank. CyberPulse56 warned that if the dataset proves genuine, the information could potentially be exploited for

identity theft, financial fraud, targeted phishing attacks and fraudulent loan applications.

The allegation comes amid broader concerns over cybersecurity risks facing India’s financial sector. Meanwhile, earlier this year, RBI stepped up cybersecurity requirements for commercial banks.

Original source: timesofindia.indiatimes.com

Technology