
印度国家银行(Bank of India Ltd.),该国按资产规模计算的最大贷款机构,已启动调查,此前一起疑似网络攻击导致数千份包含个人信息的客户记录泄露至暗网。
Bank of India Ltd., the country’s largest lender by assets, has launched a probe after a suspected cyber attack exposed thousands of customer records containing personal information onto the dark web.
该银行周三在一份交易所备案文件中表示,印度国家银行(SBI)正在调查此次泄露事件,此前初步分析发现近4000份包含客户个人信息的记录。文件称,作为初步评估的一部分,约37.5万份暗网上的记录已被分析。
SBI is investigating the breach after a preliminary analysis identified nearly 4,000 records containing customers’ personal information, the bank said in an exchange filing Wednesday. About 375,000 records available on the dark web were analyzed as part of the initial assessment, it said.
此次泄露凸显了该国银行业面临的网络安全风险,因为贷款机构正在扩大数字服务并处理不断增加的敏感客户信息。7月,国有的印度巴罗达银行(Bank of Baroda)报告了类似的泄露事件。数据泄露也波及其他地区的金融机构,使企业面临监管审查、声誉受损和客户信任度下降。在亚洲,摩根士丹利(Morgan Stanley)一名员工最近无意中共享了一份内部文件,详细列出了该公司在该地区正在推介和监控的投资银行交易。
The leak highlights cybersecurity risks facing the country’s banking sector as lenders expand digital services and handle increasing volumes of sensitive customer information. In July, state-run Bank of Baroda reported a similar breach. Data leaks have also hit financial institutions elsewhere, exposing firms to regulatory scrutiny, reputational damage and erosion of customer trust. In Asia, a Morgan Stanley employee recently inadvertently shared an internal document detailing investment-banking deals the firm was pitching and monitoring across the region.
格兰特·桑顿印度公司(Grant Thornton Bharat)合伙人维韦克·艾耶尔(Vivek Iyer)表示:“从网络格局的角度来看,攻击面在持续变化,主要归因于金融服务领域广泛的技术转型,即数字化和人工智能。”他表示,金融机构不仅需要加强其网络安全态势,还需要加强其安全运营中心。
“The attack surface from a cyber landscape standpoint is continually changing, giving the extensive technological transformation within financial services primarily account of digitization and AI,” said Vivek Iyer, a partner at Grant Thornton Bharat. Financial institutions not only need to strengthen their cyber posture but also their security operation centers, he said.
印度储备银行(Reserve Bank of India)已多次警告贷款机构注意可能损害金融稳定的网络相关风险。央行对43家印度银行和影子银行进行的一项调查发现,近三分之一的受访者报告称,与一年前相比,网络风险出现了中度或显著上升。
The Reserve Bank of India has repeatedly cautioned lenders about cyber-related risks that could potentially harm financial stability. A survey of 43 Indian banks and shadow lenders conducted by the central bank found that nearly one-third of respondents reported a moderate or significant rise in cyber risks compared to a year earlier.
印度系统重要性银行印度国家银行(SBI)表示,泄露的记录包括客户姓名、注册手机号码、出生日期、电子邮箱和居住地址,以及分行和客户识别号码,还有与贷款和潜在客户记录相关的详细信息。
SBI, which is a systemically important bank in India, said the leaked records included customers’ names, registered mobile numbers, dates of birth, email and residential addresses, as well as branch and customer identification numbers and details associated with loan and lead records.
该贷款机构称,正在进行详细调查以确定潜在泄露来源和范围,并评估对客户和银行的风险。该行表示,此次事件对印度国家银行的核心业务运营、财务表现或业务连续性没有实质性影响。
The lender said a detailed investigation is underway to determine the potential source and extent of the exposure, and assess the risks to customers and the bank. The incident has no material impact on SBI’s core business operations, financial performance or business continuity, it said.