Incident Overview
On 16 October 2026, the Bank received communications from its Threat Intelligence Service Provider, the Defence Cyber Agency, and CERT-In regarding an alert concerning suspected exposure of the Bank's customer data on the dark web.
Data Exposure Details
During preliminary analysis of approximately 375,000 records available on the dark web, 3,897 customer records containing Personally Identifiable Information (PII) were identified. The exposed information included:
- Customers' registered mobile numbers
- Dates of birth
- Names
- Gender
- Email addresses
- Residential addresses
- Branch and CIF identifiers
- Lead IDs
- Metadata associated with loan/lead records and other related files
Investigation Response
The Bank promptly activated its cyber incident response and containment protocols. An independent CERT-In-empanelled cybersecurity agency was engaged to conduct a comprehensive assessment and investigate:
- The authenticity and completeness of the exposed data
- The potential source and extent of the exposure
- The associated risks to customers and the Bank
Business Impact Assessment
The Bank states that this incident does not have any material impact on:
- Core business operations
- Financial performance
- Business continuity
The Bank's core business functions continue to operate normally without disruptions.
Current Status and Measures
A detailed assessment is currently underway. Appropriate remedial and preventive measures are being implemented as required. The Bank continues to monitor the situation closely and take all appropriate measures in accordance with applicable regulatory requirements.