Forensic auditor probing data breach, only few debit cards misused, says RBI

RBI held a meeting with senior officials from select banks, the National Payment Corporation of India and card network operators to review the steps

In the wake of the biggest-ever debit card data breach affecting the Indian banking system, the RBI said a forensic auditor is investigating the matter, even as it tried to allay fears saying the number of cards misused is "few".

The RBI held a meeting with senior officials from select banks, the National Payment Corporation of India (NPCI) and card network operators to review the steps taken by various agencies to contain the adverse fall-out of certain card details alleged to have been compromised.

The apex bank said it came to its notice on September 8 that details of certain cards issued by some banks had been possibly compromised at ATMs linked to the ATM Switch of one of the service providers.

"The issue is currently being investigated by an approved forensic auditor, under PCI-DSS framework (Payment Card Industry Data Security Standard)," the central bank said in a statement. It further said the "number of cards misused, as per currently available information, is few".

As a matter of abundant precaution, card network operators concerned were earlier advised to share the details of cards used during the period of such exposure, it said. Several public and private sector banks have recalled or blocked over 32 lakh debit cards to safeguard their customers from any financial fraud.

The Finance Ministry has asked various agencies, including the RBI to submit their report in 10 days. The Reserve Bank further said banks have been taking "necessary remedial action to avoid any potential abuse" of such cards in future by unscrupulous elements and to protect the interest of their customers.