SBI shuts website after hackers break in

The State Bank of India, the country’s largest bank, has had to shut down its corporate website after overseas hackers tried to break in.


While the bank said that transactions took place through www.onlinesbi.com, a senior SBI source said that the transactions were slow as the entire system was under watch.

The country’s largest bank decided to shut down its corporate website www.sbi.co.in on Wednesday evening when hackers blocked some of the pages. The bank also noticed unusually high traffic on its website on Wednesday.

Subsequently, the website was blocked with a ‘service unavailable’ or ‘our site is under maintenance’ pasted on www.sbi.co.in.

“We have informed the Reserve Bank of India and the cyber cell of the Mumbai Police, which are looking into the issue,” said a senior bank executive. The police and SBI suspect that the hackers are based overseas.

A Mumbai Police officer said that the cyber cell was investigating the complaint but did not share details: “It is big and the implications may be large.”

SBI sources, on their part, said that no evidence has been found of loss of data or consumers getting affected. “We suspect that the hackers wanted some information from the website and disrupt the whole system,” an executive, who did not wish to be named, said.

Out of SBI’s 2.7 million internet banking customers, 2.5 million are retail banking customers. In recent months, the bank has tried to push services such as e-trade and e-freight to lower transaction costs. As a result of the disruption, a host of transactions have been affected, especially since the suspension coincided with the year-end holidays.

The sites are maintained by the bank’s information technology department based out of the SBI Global IT Centre in Belapur. The department has been put on high alert and the bank is trying to restore services over the weekend.

SBI is the latest among Indian banks to face a threat from hackers. Banks routinely have to deal with phishing attempts and have over a period tried to sensitise their customers about not sharing details of their accounts over the internet.

According to a recent report by security firm Symantec, there were over 400 unique phishing attacks on reputed Indian banks during the second half of 2007. A report by MessageLabs, another security services company, indicated that phishing attacks rose 16 per cent between August and September and shot up by 103 per cent between September and October 2008.