SBI data breach: FIR filed a month after hackers steal 3.75 lakh records - The Economic Times
An FIR has been registered at the CBD-Belapur police station nearly a month after hackers stole 3.75 lakh bank records and 4,280 customer records from State Bank of India's Global IT Centre.
The alleged breach occurred between October 10 and 15, while the bank lodged its complaint on November 12. Bank officials became aware of the breach after discovering that the stolen data had been uploaded to the dark web, prompting an internal inquiry.
Data theft details
According to the complaint, unidentified individuals associated with the hacker group 'Siriusim' gained unauthorised access to SBI's server. The hackers allegedly stole around 32 CSV files containing 3.75 lakh records, along with JSON files and 2,721 PDF files with personally identifiable information.
The stolen files included customers' personal details, loan application records, account-opening forms, contact information and residential addresses. Some of this information was later published on the dark web, exposing sensitive data belonging to both the bank and its customers.
Bank response
SBI informed the police that it had removed the data from the dark web and ensured that the information had not been misused. The bank subsequently approached police to initiate an investigation and identify those responsible for the breach.
Even if a bank claims stolen data has been removed from the dark web and not been misused, there is a possibility that the hackers might have sold it to the highest bidder.
Legal action
Police have invoked provisions of the Bharatiya Nyaya Sanhita relating to simple theft and criminal conspiracy, along with sections of the Information Technology Act. The FIR names unidentified individuals allegedly operating through the hacker group and an IP address.
Related
