SBI notifies customers affected by cybersecurity incident, discloses no technical details
The State Bank of India (SBI) has individually notified customers whose data was involved in a recent cybersecurity incident, using email and/or WhatsApp. The bank says account balances and funds are safe. The notice does not state how the breach occurred, which systems were affected, how many customers are involved, or which data types were compromised. It also gives no incident date, no detection method, and no confirmation of whether the investigation is ongoing. SBI named no threat actor, did not attribute the incident to ransomware, and provided no IOCs.
Detalhes técnicos
- The cause, initial access vector, vulnerability, compromised credential and any third-party involvement are all undisclosed.
- The notice confirms customer information was affected but does not say whether it was accessed, copied, published or misused.
- It does not establish a publicly exposed database or any volume of stolen records.
Remediação
- SBI advises customers not to share an OTP, PIN or password.
- Customers should stay alert for suspicious calls, messages and emails, which are likely follow-on phishing and fraud vectors.
Linha do tempo
-
SBI notifies customers affected by cybersecurity incident, discloses no technical details
ler a análise desta fonte ocultar
The State Bank of India (SBI) has individually notified customers whose data was involved in a recent cybersecurity incident, using email and/or WhatsApp. The bank says account balances and funds are safe. The notice does not state how the breach occurred, which systems were affected, how many customers are involved, or which data types were compromised. It also gives no incident date, no detection method, and no confirmation of whether the investigation is ongoing. SBI named no threat actor, did not attribute the incident to ransomware, and provided no IOCs.
Technical Details
- The cause, initial access vector, vulnerability, compromised credential and any third-party involvement are all undisclosed.
- The notice confirms customer information was affected but does not say whether it was accessed, copied, published or misused.
- It does not establish a publicly exposed database or any volume of stolen records.
Remediation
- SBI advises customers not to share an OTP, PIN or password.
- Customers should stay alert for suspicious calls, messages and emails, which are likely follow-on phishing and fraud vectors.