CPI(M) MP Urges Independent Investigation into SBI Customer Data Leak, Writes to Finance Minister Nirmala Sitharaman

CPI(M) Rajya Sabha MP A A Rahim has urged Union Finance Minister Nirmala Sitharaman to order an independent investigation into the reported exposure of State Bank of India (SBI) customer data, raising concerns over the security of sensitive financial information. In a letter to the finance minister, Rahim called for a time-bound inquiry to establish the circumstances surrounding the incident, assess the extent of the data exposure and identify any security lapses. He also stressed the need for stronger safeguards to protect banking customers and ensure accountability.

The issue came to light after SBI disclosed that it had received alerts about certain customer-related information appearing on the dark web. The bank's preliminary assessment identified 3,897 customer records containing personally identifiable information among approximately 3.75 lakh records examined. The information reportedly included customers' names, registered mobile numbers, dates of birth, email addresses and residential addresses. Certain banking identifiers and loan-related metadata were also reportedly involved.

It received alerts on October 16 from its threat intelligence service provider, the Defence Cyber Agency and the Indian Computer Emergency Response Team (CERT-In). The bank subsequently initiated an assessment to determine the nature and extent of the incident. Rahim has called for a thorough examination of the circumstances surrounding the exposure and urged authorities to ensure that affected customers receive timely information and appropriate assistance. He has also highlighted the importance of strengthening cybersecurity systems across public-sector banks to prevent similar incidents.

SBI has stated that customer balances remain safe and that the incident is not expected to have a material impact on its core operations or financial performance. The bank has also engaged an independent cybersecurity agency to investigate the matter. The reported exposure has raised concerns about the potential misuse of personal information. Details such as phone numbers, email addresses and banking identifiers can be exploited by cybercriminals to carry out phishing attacks, impersonation attempts and other forms of financial fraud.

Cybersecurity experts have repeatedly highlighted the importance of protecting personal information alongside financial assets. Even when account balances remain unaffected, exposed customer details can make individuals more vulnerable to fraudulent calls, messages and attempts to obtain confidential banking credentials. The demand for an independent investigation comes amid growing reliance on digital banking services across India. The findings of the inquiry could help clarify the scope of the incident and determine whether additional security measures are required. The case has also renewed attention on the responsibility of financial institutions to protect customer information, respond promptly to cyber threats and communicate clearly with people whose data may have been compromised.