India's largest bank confirms leak of thousands of customer personal records
State Bank of India confirmed a data loss incident after thousands of customer records were identified on the dark web. An analysis of the official filing outlines the exposed metadata, contact information, and the independent security audit launched following alerts from national cyber agencies. The case came to light when Indian government security agencies notified the bank on October 16. The bank officially confirmed in a statement on October 21 that it was dealing with a data loss incident.
🎯 Vulnerability: Web Security Vulnerability
💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.