SBI Data Leak: Your money, password, address all at risk?

by

SBI Data Leak: After the reports of State Bank of India (SBI) data leak, many questions are arising in the minds of the customers. Are people afraid that their money, passwords and addresses are all at risk? According to cyber expert Pawan Duggal, SBI is the largest bank in the country and its customer base is huge, so this data leak is a big issue not only for the customers but also for the security of the country.

But the reports found on the dark web do not mean that 3.75 lakh customer accounts have been hacked. A preliminary investigation by the bank has revealed leakage of personal information of customers in 3,897 records. Currently, there is no evidence of withdrawal of money from customer accounts or leakage of passwords and ATM PINs.

Which data of 3,897 customers of SBI was leaked?

A preliminary investigation by the bank revealed the following leaked details:

  • Customer Name, Date of Birth and Gender

  • Registered mobile number and email id

  • Home address and bank branch details

  • Customer Information File (CIF) ID and metadata associated with the loan application

(Note: Just having the CIF or name cannot directly withdraw money, but cyber thugs can use this information to win the trust of the customer.)

Is your SBI account at risk?

It is not right to say that every SBI customer’s account is at risk just based on this report. Only 3,897 records of the bank’s over 50 crore customers have been affected. So there is no need to panic and close the account or open a new account. Just monitor your account transactions.

What harm can information leakage cause?

Fraudsters can pretend to be bank officials and call using your personal details. They may try to do fraud by sending fake link or getting OTP in the name of loan or KYC.

If you have an account with SBI, do these 8 things now:

  1. Never share OTP, PIN or Password: Even if the other person gives correct details, do not give confidential details as if he is a bank official.

  2. Do not KYC from unknown links: If you get a message about account closure or KYC update, first contact the official bank app or branch.

  3. Check Daily Transactions: View statement, continue SMS and email alerts.

  4. Have a strong password: If the net banking password is weak then change it immediately.

  5. Monitor the credit report: If you have applied for a loan, keep checking the CIBIL report.

  6. Secure email and mobile accounts: Continue with Two-Step Verification.

  7. Complain immediately: Inform the bank immediately if any suspicious transaction appears. In case of financial cyber fraud Helpline number 1930 Call or file a complaint on the national cyber crime portal.

How to identify a fake call?

  • The caller may ask you for OTP, PIN, CVV or password.

  • Force to transfer money or download screen sharing app.

  • Threaten to close the account immediately.

Safe way: In such a situation hang up the call immediately and verify by calling the official website of the bank or the helpline number provided on the back of the debit card itself.

Leave a Comment