SBI customers ALERT! Account holders' balance, mobile number leaked; millions affected

SBI Data Breach: A security researcher said that the leaked data could be used to target customers with high bank balance.

SBI customers ALERT! Account holders' balance, mobile number leaked; millions affected
SBI data leak: Earlier this week, the SBI has accused UIDAI of mishandling citizen's Aadhaar data that allowed the creation of fake Aadhaar cards. Pixabay image
Written By: Akash Sinha
Updated: Fri, Feb 01, 2019
03:46 pm
ZeeBiz WebDesk
RELATED NEWS
SBI IFSC Code: How to know IFSC code of your State Bank of India branch SBI IFSC Code: How to know IFSC code of your State Bank of India branch
SBI share price may reach Rs 370 levels, says Anand Rathi Securities' Jay Thakkar SBI share price may reach Rs 370 levels, says Anand Rathi Securities' Jay Thakkar
SBI Tax Savings Scheme: 80C Income Tax benefit! Check features, eligibility and more SBI Tax Savings Scheme: 80C Income Tax benefit! Check features, eligibility and more
SBI savings bank account interest rate fall shouldn't bother you; Try these banks and pocket up to 7 pct returns SBI savings bank account interest rate fall shouldn't bother you; Try these banks and pocket up to 7 pct returns
SBI Online: Forgot your internet banking password? How to recover State Bank of India account SBI Online: Forgot your internet banking password? How to recover State Bank of India account

In a news that may concern lakhs of State Bank of India (SBI) customers, the largest bank in the country has failed to keep the secrecy of its customers' data. According to a TechCrunch report, the SBI server, which exposed the users details, hosted two months data of SBI Quick, text messages and call-based system that a customer uses to get information like account balance. The bank has not protected the server with a password, therefore, allowing the access to the confidential data of millions of customers.

The report said that it was not known for how long the server was open. The database had given access to real-time text messages, account balance, recent transactions, partial bank account number and also exposed the customers' phone numbers.  The report also claimed that the SBI has now protected the server. A security researcher said that the leaked data could be used to target customers with high bank balance.

Ankush Johar, Director at Infosec Ventures, told Zee Business Online that there is a need for adoption of a ‘Responsible Vulnerability Disclosure’ policy. 

“This massive story showcases the need for adoption of a ‘Responsible Vulnerability Disclosure’ policy that doesn’t penalise the security researcher community. There is an ISO/IEC 29147 policy now available and companies serious about their security need to adopt this, to safeguard their cyber posture. It is a shame that security researchers are threatened with legal action even when they approach organisations via the responsible disclosure route," said Johar. 

Watch This Zee Business Tweet Video

Earlier this week, the SBI has accused UIDAI of mishandling citizen's Aadhaar data that allowed the creation of fake Aadhaar cards. However, the UIDAI has rubbished the charges claiming that citizen data is safe.

Get Latest Business News, Stock Market Updates and Videos; Check your tax outgo through Income Tax Calculator and save money through our Personal Finance coverage. Check Business Breaking News Live on Zee Business Twitter and Facebook. Subscribe on YouTube.