[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fqlPuKPBUSs_S8XwtiRpoUqaN2RYa-FiG6mSex7MMows":3},{"article":4,"iocs":45,"watch_terms":46,"solutions":47,"lesson":137},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":24,"category":25,"article_tags":29},"0d8af787-a461-4019-9e13-0e6606477427","SBI Notifies Customers Impacted by the Recent Cyber Incident","sbi-notifies-customers-impacted-by-the-recent-cyber-incident-18845b","State Bank of India (SBI) has individually notified customers whose information was identified in a recent cyber incident, sending alerts through email and WhatsApp. In its latest advisory on October 23, the bank said customer account balances and funds remain safe while investigators examine the suspected exposure of personal information found on the dark web. […] The post SBI Notifies Customers Impacted by the Recent Cyber Incident appeared first on Cyber Security News.","State Bank of India has individually notified customers whose personal information was identified in a recent cyber incident, with approximately 3,897 customer records containing PII found on the dark web. The exposed data includes names, mobile numbers, dates of birth, email addresses, home addresses, gender, branch details, and loan inquiry information, though the bank confirmed account balances and funds remain secure. Investigators are still examining the authenticity and source of the exposure, with no confirmed entry point or malware identified at this time.","SBI notifies 3,897 customers after personal data exposure discovered on dark web.","https:\u002F\u002Fcybersecuritynews.com\u002Fsbi-notifies-customers-with-cyber-incident\u002F","https:\u002F\u002Fcybersecuritynews.com\u002Fwp-content\u002Fuploads\u002F2026\u002F10\u002FMultiple-waves-of-DDoS-attacks-caused-this-weeks-outage-in-North-Korea-1.webp","2026-10-23T09:20:41+00:00","2026-10-23T15:08:57.299209+00:00",7,[17,20,22],{"name":18,"type":19},"State Bank of India","vendor",{"name":21,"type":19},"CERT-In",{"name":23,"type":19},"Defense Cyber Agency","2e06f76c-d5b9-4f54-9eef-4d3447b10730",{"id":24,"icon":26,"name":27,"slug":28},null,"Breaches","breaches",[30,35,40],{"category":31},{"id":32,"icon":26,"name":33,"slug":34},"2c8f44d4-b56e-47cf-9677-04f22c9ee78d","Identity & Access","identity-access",{"category":36},{"id":37,"icon":26,"name":38,"slug":39},"614132b8-5837-4952-b8b5-c6c9a32a1d85","Privacy","privacy",{"category":41},{"id":42,"icon":26,"name":43,"slug":44},"c5eccf7c-abbc-4bd3-bbed-e6da5cba8e73","Incident Response","incident-response",[],[18,21,23],{"controls":48,"vendors":136},[49,78,107],{"slug":50,"name":51,"problem":52,"products":53},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",[54,62,70],{"vendor_slug":55,"vendor_name":56,"vendor_logo":57,"product_slug":58,"product_name":59,"url":60,"description":61},"vectra-ai","Vectra AI","\u002Fvendor-logos\u002Fvectra-ai.png","vectra-ai-platform","Vectra AI Platform","https:\u002F\u002Fwww.vectra.ai\u002Fplatform","Detection of attacker behaviour across network, identity and cloud.",{"vendor_slug":63,"vendor_name":64,"vendor_logo":65,"product_slug":66,"product_name":67,"url":68,"description":69},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-identity-protection","Falcon Identity Protection","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fnext-gen-identity-security\u002Fidentity-protection\u002F","Detection of identity attacks against Active Directory and Entra ID, with risk-based MFA.",{"vendor_slug":71,"vendor_name":72,"vendor_logo":73,"product_slug":74,"product_name":75,"url":76,"description":77},"okta","Okta","\u002Fvendor-logos\u002Fokta.png","identity-threat-protection","Okta Identity Threat Protection","https:\u002F\u002Fwww.okta.com\u002Fproducts\u002Fidentity-threat-protection\u002F","Continuous risk assessment of sessions after login, with automatic actions such as ending sessions.",{"slug":79,"name":80,"problem":81,"products":82},"data-loss-prevention","Data loss prevention (DLP)","Sensitive data cannot quietly leave by email, upload, USB stick or AI tool.",[83,91,99],{"vendor_slug":84,"vendor_name":85,"vendor_logo":86,"product_slug":87,"product_name":88,"url":89,"description":90},"netskope","Netskope","\u002Fvendor-logos\u002Fnetskope.png","netskope-dlp","Netskope DLP","https:\u002F\u002Fwww.netskope.com\u002Fproducts\u002Fdata-loss-prevention","Data loss prevention for web, cloud apps, AI tools and endpoints.",{"vendor_slug":92,"vendor_name":93,"vendor_logo":94,"product_slug":95,"product_name":96,"url":97,"description":98},"forcepoint","Forcepoint","\u002Fvendor-logos\u002Fforcepoint.png","forcepoint-dlp","Forcepoint DLP","https:\u002F\u002Fwww.forcepoint.com\u002Fproduct\u002Fdlp-data-loss-prevention","Data loss prevention for endpoints, network, email and cloud applications.",{"vendor_slug":100,"vendor_name":101,"vendor_logo":102,"product_slug":103,"product_name":104,"url":105,"description":106},"proofpoint","Proofpoint","\u002Fvendor-logos\u002Fproofpoint.png","enterprise-dlp","Proofpoint Enterprise DLP","https:\u002F\u002Fwww.proofpoint.com\u002Fus\u002Fproducts\u002Fdata-loss-prevention","Data loss prevention across email, cloud and endpoints.",{"slug":108,"name":109,"problem":110,"products":111},"third-party-risk-management","Third-party risk management (TPRM)","You know which suppliers could hurt you, and you hear quickly when one of them is breached.",[112,120,128],{"vendor_slug":113,"vendor_name":114,"vendor_logo":115,"product_slug":116,"product_name":117,"url":118,"description":119},"upguard","UpGuard","\u002Fvendor-logos\u002Fupguard.png","upguard-vendor-risk","UpGuard Vendor Risk","https:\u002F\u002Fwww.upguard.com\u002Fproduct\u002Fvendor-risk","Supplier security questionnaires, ratings and continuous monitoring.",{"vendor_slug":121,"vendor_name":122,"vendor_logo":123,"product_slug":124,"product_name":125,"url":126,"description":127},"onetrust","OneTrust","\u002Fvendor-logos\u002Fonetrust.png","third-party-management","OneTrust Third-Party Management","https:\u002F\u002Fwww.onetrust.com\u002Fsolutions\u002Fthird-party-management\u002F","Supplier inventory, risk assessments and monitoring across privacy and security.",{"vendor_slug":129,"vendor_name":130,"vendor_logo":131,"product_slug":132,"product_name":133,"url":134,"description":135},"bitsight","Bitsight","\u002Fvendor-logos\u002Fbitsight.png","bitsight-tprm","Bitsight Third-Party Risk Management","https:\u002F\u002Fwww.bitsight.com\u002Fproducts\u002Fthird-party-risk-management","Supplier assessments and continuous monitoring based on security ratings.",[],{"slug":138,"title":139,"body":140,"framework_refs":141,"framework_notes":149},"sbi-customer-pii-surfaces-on-dark-web-after-cyber-incident","SBI Customer PII Surfaces on Dark Web After Cyber Incident","State Bank of India suffered a data exposure event that resulted in nearly 4,000 customer records — including names, dates of birth, addresses, and loan inquiry details — appearing on the dark web. The fact that investigators have yet to confirm an entry point or identify malware suggests significant gaps in logging, monitoring, and forensic readiness. Exposure of PII at this scale carries serious regulatory and reputational consequences for a systemically important financial institution. This incident underscores that even when account funds are unaffected, the theft of personal data enables downstream fraud, phishing, and identity theft targeting customers.",[142,143,144,145,146,147,148],"GDPR Article 32","NIST SP 800-53 SI-2: Flaw Remediation","NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control","CIS Control 3: Data Protection","CIS Control 17: Incident Response Management","ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities","NIS2 Article 21(2)(b)",{"GDPR Article 32":150,"NIS2 Article 21(2)(b)":151,"CIS Control 3: Data Protection":152,"NIST SP 800-53 SI-2: Flaw Remediation":153,"CIS Control 17: Incident Response Management":154,"ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities":155,"NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control":156},"Article 32 requires organizations to implement appropriate technical and organizational measures to protect personal data; the exposure of nearly 4,000 PII records to the dark web indicates those measures were insufficient to prevent or detect the breach in time.","NIS2 mandates incident handling measures for essential and important entities; the delayed identification of the breach source reflects a gap in the proactive monitoring and response capabilities this article requires.","This control requires inventorying, classifying, and protecting sensitive data; had SBI applied encryption, data minimization, and access restrictions to customer PII, the impact of the exfiltration would have been significantly reduced.","With no confirmed entry point yet identified, systematic flaw remediation processes — including vulnerability scanning and rapid patching — are critical controls that may have closed the vector used to access customer data.","The absence of a confirmed entry point or malware after the incident suggests the incident response process lacks the forensic depth needed to reconstruct the attack chain, which this control directly addresses.","A structured vulnerability management program aligned to this control would require SBI to proactively identify and remediate weaknesses in systems holding customer data before they can be exploited for exfiltration.","Restricting access to PII-containing systems through strong identity management and least-privilege access would limit the blast radius of any compromised account or credential used in this incident."]