SBI customers ALERT! Account holders' balance, mobile number leaked; millions affected

SBI Data Breach: A security researcher said that the leaked data could be used to target customers with high bank balance.

SBI customers ALERT! Account holders' balance, mobile number leaked; millions affected
SBI data leak: Earlier this week, the SBI has accused UIDAI of mishandling citizen's Aadhaar data that allowed the creation of fake Aadhaar cards. Pixabay image
Written By: Akash Sinha
Updated: Fri, Feb 01, 2019
03:46 pm
ZeeBiz WebDesk
RELATED NEWS
Online SBI: State Bank of India customers? You should be aware of these frauds Online SBI: State Bank of India customers? You should be aware of these frauds
SBI share price today: Strong pull back rally, expert says SBI share price today: Strong pull back rally, expert says
Yes Bank's Rs 15K cr further public offering opens on July 15 Yes Bank's Rs 15K cr further public offering opens on July 15
SBI to invest up to Rs 1,760 cr in Yes Bank's further public offering SBI to invest up to Rs 1,760 cr in Yes Bank's further public offering
SBI reduces MCLR by up to 10 bps: Check new rates SBI reduces MCLR by up to 10 bps: Check new rates

In a news that may concern lakhs of State Bank of India (SBI) customers, the largest bank in the country has failed to keep the secrecy of its customers' data. According to a TechCrunch report, the SBI server, which exposed the users details, hosted two months data of SBI Quick, text messages and call-based system that a customer uses to get information like account balance. The bank has not protected the server with a password, therefore, allowing the access to the confidential data of millions of customers.

The report said that it was not known for how long the server was open. The database had given access to real-time text messages, account balance, recent transactions, partial bank account number and also exposed the customers' phone numbers.  The report also claimed that the SBI has now protected the server. A security researcher said that the leaked data could be used to target customers with high bank balance.

Ankush Johar, Director at Infosec Ventures, told Zee Business Online that there is a need for adoption of a ‘Responsible Vulnerability Disclosure’ policy. 

“This massive story showcases the need for adoption of a ‘Responsible Vulnerability Disclosure’ policy that doesn’t penalise the security researcher community. There is an ISO/IEC 29147 policy now available and companies serious about their security need to adopt this, to safeguard their cyber posture. It is a shame that security researchers are threatened with legal action even when they approach organisations via the responsible disclosure route," said Johar. 

Watch This Zee Business Tweet Video

Earlier this week, the SBI has accused UIDAI of mishandling citizen's Aadhaar data that allowed the creation of fake Aadhaar cards. However, the UIDAI has rubbished the charges claiming that citizen data is safe.

Get Latest Business News, Stock Market Updates and Videos; Check your tax outgo through Income Tax Calculator and save money through our Personal Finance coverage. Check Business Breaking News Live on Zee Business Twitter and Facebook. Subscribe on YouTube.