Cybercriminals reportedly hacked the SBI Global IT Centre, stealing over 3.75 lakh bank records and customer data. The incident occurred between October 10 and 15, with the bank filing a complaint on November 12. An internal inquiry revealed that the stolen data appeared on the dark web, prompting the bank to act. Authorities are now investigating unidentified individuals associated with the hacker group ‘Siriusim’.
Nearly a month after cybercriminals allegedly hacked into the centralised computer server at the State Bank of India‘s (SBI) Global IT Centre in CBD-Belapur and stole confidential information, including 3.75 lakh bank records and 4,280 customer records, an FIR has been registered at the CBD-Belapur police station, according to George Mendonca’s Times of India report.The alleged breach occurred between October 10 and 15, while the bank lodged its complaint on November 12.
SPI Arun Pawar said bank officials became aware of the breach after discovering that the stolen data had been uploaded to the dark web. The discovery prompted an inquiry by the bank’s internal team.
SBI informed the police that it had removed the data from the dark web and ensured that the information had not been misused. The bank subsequently approached the police to initiate an investigation and identify those responsible for the breach.
According to the complaint, unidentified individuals associated with a hacker group called ‘Siriusim’ gained unauthorised access to the server at SBI’s Global IT Centre.
The hackers allegedly stole around 32 CSV files containing 3.75 lakh records, along with JSON files and 2,721 PDF files carrying personally identifiable information (PII).
The stolen files included customers’ personal details, loan application records, account-opening forms, contact information and residential addresses. Some of the information was later published on the dark web, exposing sensitive data belonging to the bank and its customers.
Cybersecurity and privacy expert lawyer Prashant Mali warned that removing stolen information from the dark web does not necessarily mean it has not already been shared or sold.
“Even if a bank claims stolen data has been removed from the dark web and not been misused, there is a possibility that the hackers might have sold it to the highest bidder,” he said, advising SBI customers to remain alert to phishing attempts and other cyberattacks.
Police have invoked provisions of the Bharatiya Nyaya Sanhita (BNS) relating to simple theft and criminal conspiracy, along with sections of the Information Technology Act.
The FIR names unidentified individuals allegedly operating through the hacker group and an IP address.
(With inputs from TOI)
