SBI Data Leak Triggers Political Storm as BJD Demands Stronger Cybersecurity Measures

Bhubaneswar: The alleged exposure of customer information belonging to the State Bank of India (SBI) on the dark web has triggered a fresh political controversy, with the Biju Janata Dal (BJD) demanding immediate accountability and stronger cybersecurity safeguards.

The opposition party expressed concern over reports that thousands of SBI customer records were allegedly found circulating on the dark web, raising fears about data privacy and the security of sensitive banking information.

According to SBI’s preliminary assessment, a review of approximately 3.75 lakh records discovered online identified 3,897 customer records containing personally identifiable information (PII).

The exposed data reportedly included names, mobile numbers, email addresses, dates of birth, addresses, and certain customer and loan-related details.

SBI stated that the matter came to light following alerts received from cybersecurity agencies, including the Defence Cyber Agency and the Indian Computer Emergency Response Team (CERT-In).

The bank has initiated an investigation and appointed an independent cybersecurity agency to determine the source and extent of the exposure.

The bank maintained that highly sensitive credentials such as passwords, PINs, and one-time passwords (OTPs) were not part of the leaked dataset. SBI also assured customers that its core banking systems remain secure and operational.

Reacting strongly to the alleged breach, BJD leaders questioned the effectiveness of the bank’s data protection mechanisms and called for greater transparency regarding the incident.

The party stressed that customer trust in financial institutions depends on robust security systems and prompt disclosure of cybersecurity risks.

The controversy has once again highlighted growing concerns over cyber threats targeting financial institutions and the need for enhanced data protection measures.

Experts warn that even limited exposure of personal information can increase the risk of phishing attacks, identity theft, and financial fraud.

As investigations continue, customers are advised to remain vigilant, monitor account activity, and report any suspicious communication claiming to be from banking authorities.