[INDIA] RBI, SEBI and IRDAI · Source-code escrow and continuity obligations for critical applications[EU DORA] ICT third-party risk testing required · In force Jan 2025[PRA] SS2/21 UK · Vendor recovery evidence required[MAS] Singapore TRM · Independent vendor recoverability expected[APRA] CPS 230 Australia · Third-party continuity obligations in force[FFIEC] United States · Source-code access and software escrow addressed in third-party contracts[ENTERPRISE] Mission-critical software procurement increasingly requires continuity evidence before contract
[INDIA] RBI, SEBI and IRDAI · Source-code escrow and continuity obligations for critical applications[EU DORA] ICT third-party risk testing required · In force Jan 2025[PRA] SS2/21 UK · Vendor recovery evidence required[MAS] Singapore TRM · Independent vendor recoverability expected[APRA] CPS 230 Australia · Third-party continuity obligations in force[FFIEC] United States · Source-code access and software escrow addressed in third-party contracts[ENTERPRISE] Mission-critical software procurement increasingly requires continuity evidence before contract

CYBER WATCH / Data breaches

Navi Mumbai bank breach allegedly exposes 4,280 customer records

Police in Navi Mumbai have registered a case over an alleged cyberattack on a nationalised bank's data centre in CBD Belapur. According to the FIR, data for about 4,280 customers, including loan applications and account-opening forms, was taken between October 9 and 15, 2026. Some material has allegedly appeared on the dark web. The bank has not been named, and it says it is still assessing the breach.

All updates
Reported ReportedPublished 14 November 2026

Incident timing: Alleged unauthorised access between October 9 and 15, 2026, per the FIR.

What the police complaint says

An FIR registered at CBD police station on November 12, 2026 alleges that an intruder gained unauthorised access to the bank's servers between October 9 and October 15, 2026. The intruder allegedly copied several large data files and 2,721 scanned documents. Police estimate that about 4,280 customer records containing personal information are involved. The material reportedly includes personal details, loan application records, account-opening forms, contact numbers and residential addresses.

What remains unclear

The report does not name the bank. The bank told police it is still assessing the full extent of the breach, including whether other categories of data were accessed and whether any losses occurred. The FIR names one individual or group and unidentified others. These are allegations at this stage. The claim that some records have circulated on the dark web has not been independently verified.

Why it matters

The data described here is the kind used for impersonation and loan or account fraud. Customers who receive calls or messages quoting their loan or account details should check them through the bank's official channels before sharing anything.

Source & attribution

Read the original reporting at Hindustan Times

AI-assisted summary prepared for Castler editorial review. Evidence labels describe the source of a claim, not a guarantee that every detail of an investigation is settled.

Editorial policy & corrections