View source for 2016 Indian Banks data breach

{{Short description|Data breach of Indian banks}}
'''2016 Indian Banks data breach''' was reported in October 2016. It was estimated 3.2 million debit cards were compromised. Major [[Finance:Banking in India|Indian banks]], among them SBI, [[Company:HDFC Bank|HDFC Bank]], ICICI, YES Bank and Axis Bank, were among the worst hit.<ref name="et-20oct2016">{{cite web|url=http://economictimes.indiatimes.com/industry/banking/finance/banking/3-2-million-debit-cards-compromised-sbi-hdfc-bank-icici-yes-bank-and-axis-worst-hit/articleshow/54945561.cms|title=3.2 million debit cards compromised; SBI, HDFC Bank, ICICI, YES Bank and Axis worst hit|last1=Shukla|first1=Saloni|last2=Bhakta|first2=Pratik|date=20 October 2016|website=The Economic Times|access-date=2 April 2020}}</ref> The breach went undetected for months and was first detected after several banks reported fraudulent use of their customers’ cards in {{wipe|China}} and the {{wipe|United States}}, while these customers were in {{wipe|India}}.<ref>{{Cite web|url=https://www.livemint.com/Industry/jVF2Aw72w0DcBsUGseV0UP/Malware-caused-Indias-biggest-debit-card-fraud-Audit-repor.html|title=Malware caused India's biggest debit card data breach: Audit report|last=Gopakumar|first=Gopika|date=10 February 2017|website=Livemint|language=en|access-date=2 April 2020}}</ref><ref>{{Cite news|last=Christopher|first=Nilesh|url=https://economictimes.indiatimes.com/small-biz/security-tech/security/the-worst-cyber-attacks-of-2016/articleshow/56212448.cms|title=The worst cyber attacks of 2016|date=28 December 2016|work=The Economic Times|access-date=2 April 2020}}</ref> 

This resulted in one of the India's biggest card replacement drive in banking history. The biggest Indian bank State Bank of India announced the blocking and replacement of almost 600,000 debit cards.<ref name="et-2">{{cite web|url=http://economictimes.indiatimes.com/industry/banking/finance/banking/security-breach-sbi-blocks-over-6-lakh-debit-cards/articleshow/54933861.cms|title=Security breach: SBI blocks over 6 lakh debit cards|last=Iyer|first=Satyanarayan|date=20 October 2016|website=The Economic Times|access-date=2 April 2020}}</ref>

An audit performed by SISA Information Security reports that the breach was due to [[Malware|malware]] injected into the [[Finance:Payment gateway|payment gateway]] network of [[Company:Hitachi|Hitachi]] Payment Systems.<ref>{{Cite news|last=Mathew|first=Alex|url=https://www.bloombergquint.com/business/2017/02/09/hitachi-owns-up-to-breach-that-compromised-32-lakh-debit-cards|title=Hitachi Owns Up To Mid-2016 Breach That Compromised 32 Lakh Debit Cards|date=9 February 2017|work=Bloomberg Quint|access-date=2 April 2020|language=en}}</ref><ref>{{Cite book|last1=Ryder|first1=Rodney D.|url=https://books.google.com/books?id=hS-4DwAAQBAJ&q=2016+Indian+Banks+data+breach&pg=PT102|title=Cyber Crisis Management: Overcoming the Challenges in Cyberspace|last2=Madhavan|first2=Ashwin|publisher=Bloomsbury Publishing|year=2019|isbn=978-93-89165-52-4|location=New Delhi|language=en}}</ref>

==See also==
*2016 Bangladesh Bank heist
*List of cyber-attacks
*[[Data breaches in India]]

==References==
{{Reflist}}

{{Hacking in the 2010s}}

[[Category:Data breaches]]



{{Sourceattribution|2016 Indian Banks data breach|1}}