The original text is in EN, taken from the source site. Source ↗

The State Bank of India (SBI) has individually notified customers whose data was involved in a recent cybersecurity incident.

In an update focused on customer safety, thebank confirmed it contacted affected individualsvia email and/or WhatsApp. They reassured customers that their account balances and funds are safe.

This announcement follows an earlier communication about the incident. However, the notice does not explain how the breach occurred, identify the affected systems, disclose how many customers are involved, or specify which types of information were compromised. These omissions hinder an independent assessment of the incident’s scope and technical implications.

According to the update, SBI has completed individual notifications to customers whose data was identified as compromised.

While the wording confirms that customer information was affected, it does not clarify whether attackers accessed, copied, published, or otherwise misused that information.

This distinction matters for interpreting the announcement: a notification of data involvement does not automatically imply a publicly exposed database or aspecific volume of stolen records; the notice establishes neither.

SBI did not name any threat actor, attribute the incident to ransomware, or identify a vulnerability, compromised credential, or third-party service as the initial access point. The statement also provided no indicators of compromise, forensic findings, or remediation timeline.

The bank stated, “We reiterate that your account balances and funds are safe with us.” This is an assurance about customer money; however, it provides no more specific information about the confidentiality of the affected data or the systems involved.

The update does not mention the incident’s date or explain how the bank detected the activity. It also does not clarify whether the investigation is still ongoing. As a result, the notice alone cannot support a detailed reconstruction of the incident or conclusions about containment.

SBI advised customers to follow safe digital banking practices, such as not sharing an OTP, PIN, or password, and to stay alert for suspicious calls, messages, and emails.

In summary, the confirmed development is limited: SBI states it has contacted identified affected customers and maintains that account balances and funds are secure. However, the customer update does not disclose the technical cause, affected data fields, incident scale, or investigative findings, leaving critical information unavailable for public release.

Stops Cyber threats before impact with 21 min faster MTTR. Integrate ANYRUN’s Sandbox in your SOC.