SBI is an Indian multinational, public sector banking and financial services, it is the largest bank in India with a 23% market share in assets.
SBI Quick is free SBI service used by customers to get Account Balance, Mini Statement and more just by giving a Missed Call or sending an SMS with pre-defined keywords to pre-defined mobile numbers.
The bank has failed to protect the server which allows anyone by having the IP address of the server can access the data on millions of customers’ information.
It is not known for how long the server is kept open, Techcrunch confirms the server storing millions of messages every day.
Techcrunch reached out to SBI and the bank reacted quickly and fixed the issue within hours. If this information accessed by threat actors will pose a serious risk to bank customers.