Data Breach

SBI's reported data leak has raised questions about customer privacy. Here's what Indian laws require banks to do, whether affected customers can seek compensation and how they can protect themselves

Threats call for stronger systemic safeguards

The lender said preliminary analysis of around 375,000 dark web records identified 3,897 customer records containing personal information; a detailed investigation is under way

SBI said a analysis showed that exposed information included customer names, mobile numbers, DOBs, email addresses, residential addresses, brand and customer identifiers, along with loan ‌records

The breach reportedly exposed highly sensitive information, including detailed descriptions of some FBI employees' counterintelligence roles, street addresses of human intelligence operatives

The breach occurred after unidentified individuals misused a private Danish company's legitimate access to search the Central Person Register, known as CPR

South Korea has ordered a thorough investigation into recent data breaches at banks and public agencies, while regulators warned that AI may have been used in the attacks

In the report, OpenAI said that it knew as far back as late May that AI models it was testing were leveraging a software vulnerability to access the open internet

Indian IT firms have downplayed recent data breach reports, but cybersecurity experts say the bigger risks could lie in client trust, contractual exposure, regulatory scrutiny and reputation

IT services major says potentially exposed employee data may be limited and several years old; further investigation is underway and material findings will be reported

TCS said the information referenced appeared to be more than four years old and limited to basic employee information, with no indication that customer data was impacted

IBM says AI-generated attacks accounted for 26% of malicious breaches in India, while organisations using AI and security automation reported lower breach costs

The alleged Bank of Baroda breach follows several major cyberattacks involving Indian banks, telecom operators, manufacturers, airlines and fintech firms

State-owned lender orders a forensic audit after an employee's email account was compromised, while maintaining that its core banking systems were not accessed

Apple and Tata Electronics tell MeitY no significant data was lost in the alleged breach, says secretary S Krishnan

The issue of an alleged data breach at Tata Electronics that reportedly exposed sensitive information related to Apple's unreleased iPhone model is currently under examination, and both entities are satisfied they haven't lost much on commercial parameters, a senior IT Ministry official said on Monday. The government had earlier said that the incident was reported to the Indian Computer Emergency Response Team (CERT-In). CERT-In is the national nodal agency for responding to computer security incidents. "We are studying what is happening on that issue. But on the commercial aspect, we understand that both the current entities involved are broadly satisfied that they have not lost anything... they are not very concerned about that. So this is what we understand from those entities," IT Secretary S Krishnan told reporters on Monday. Krishnan's comment comes in the wake of reports that details of components and suppliers, along with Apple's iPhone 18 Pro model photos were put on the d

The response protocols were deployed immediately, and the incident has had no impact on our operations across businesses, which remain unaffected, the company said

The drugmaker said it is monitoring its systems and maintaining normal operations after reports that a hacking group claimed to have stolen and published company data

Instagram said accounts are safe after many users received unexpected password reset emails, following reports that raised concerns about a possible data leak

Coupang said it will give purchase vouchers worth 50,000 won to eligible users; these vouchers can be used across different Coupang services