SBI customers ALERT! Account holders' balance, mobile number leaked; millions affected

SBI Data Breach: A security researcher said that the leaked data could be used to target customers with high bank balance.

SBI customers ALERT! Account holders' balance, mobile number leaked; millions affected
SBI data leak: Earlier this week, the SBI has accused UIDAI of mishandling citizen's Aadhaar data that allowed the creation of fake Aadhaar cards. Pixabay image
Written By: Akash Sinha
Updated: Fri, Feb 01, 2019
03:46 pm
ZeeBiz WebDesk
RELATED NEWS
SBI customers' alert: Bank's YONO, INB, YONO Lite, UPI services will be affected today—here is why SBI customers' alert: Bank's YONO, INB, YONO Lite, UPI services will be affected today—here is why
SBI contactless service: No need to visit bank for THESE services—check list of State Bank of India facilities that can be availed through phone and SMS SBI contactless service: No need to visit bank for THESE services—check list of State Bank of India facilities that can be availed through phone and SMS
SBI account holder? Alert! Big relief for state Bank of India customers! No need to visit bank for THIS service SBI account holder? Alert! Big relief for state Bank of India customers! No need to visit bank for THIS service
SBI customers alert: Don't do this! You will lose your money in this QR Code fraud! SBI customers alert: Don't do this! You will lose your money in this QR Code fraud!
SBI account holder? BIG CHANGE! From now, OTP required to access your online account; know why SBI account holder? BIG CHANGE! From now, OTP required to access your online account; know why

In a news that may concern lakhs of State Bank of India (SBI) customers, the largest bank in the country has failed to keep the secrecy of its customers' data. According to a TechCrunch report, the SBI server, which exposed the users details, hosted two months data of SBI Quick, text messages and call-based system that a customer uses to get information like account balance. The bank has not protected the server with a password, therefore, allowing the access to the confidential data of millions of customers.

The report said that it was not known for how long the server was open. The database had given access to real-time text messages, account balance, recent transactions, partial bank account number and also exposed the customers' phone numbers.  The report also claimed that the SBI has now protected the server. A security researcher said that the leaked data could be used to target customers with high bank balance.

Ankush Johar, Director at Infosec Ventures, told Zee Business Online that there is a need for adoption of a ‘Responsible Vulnerability Disclosure’ policy. 

“This massive story showcases the need for adoption of a ‘Responsible Vulnerability Disclosure’ policy that doesn’t penalise the security researcher community. There is an ISO/IEC 29147 policy now available and companies serious about their security need to adopt this, to safeguard their cyber posture. It is a shame that security researchers are threatened with legal action even when they approach organisations via the responsible disclosure route," said Johar. 

Watch This Zee Business Tweet Video

Earlier this week, the SBI has accused UIDAI of mishandling citizen's Aadhaar data that allowed the creation of fake Aadhaar cards. However, the UIDAI has rubbished the charges claiming that citizen data is safe.

Get Latest Business News, Stock Market Updates and Videos; Check your tax outgo through Income Tax Calculator and save money through our Personal Finance coverage. Check Business Breaking News Live on Zee Business Twitter and Facebook. Subscribe on YouTube.