Cyberattacks are becoming a serious financial threat to Indian banks and non-banking financial companies (NBFCs), exposing lenders to losses that extend beyond stolen money. Recent incidents involving unauthorised fund transfers, suspected data breaches and weaknesses in financial technology systems have raised concerns about the impact of cybercrime on lenders’ profitability, operating costs and financial stability.
The Reserve Bank of India (RBI) has intensified scrutiny of cybersecurity preparedness as financial institutions become increasingly dependent on interconnected digital infrastructure.
How Are Cyberattacks Affecting Banks Financially?
Cybersecurity incidents can create substantial financial liabilities for banks and NBFCs, even when the initial fraud amount is relatively limited.
Apart from direct losses, institutions may face expenses related to forensic investigations, restoring compromised systems, compensating customers, legal proceedings and regulatory compliance.
Additional spending on cybersecurity infrastructure and technology upgrades can increase operating costs. For smaller lenders, significant cyber-related losses could weaken capital reserves and affect their ability to maintain normal operations.
What Happened in the Recent Banking Fraud?
Two Mumbai-based NBFCs allegedly lost approximately $2 million after hackers compromised an application programming interface (API) connected to ICICI Bank. The attackers reportedly initiated more than 700 unauthorised transfers on October 8 and 9 by exploiting the system used to send loan-disbursement instructions.
The incident demonstrated how compromised credentials and weaknesses in transaction controls can enable fraudulent payments through legitimate banking infrastructure.
https://the420.in/fcrf-certified-chief-ai-officer-second-cohort-november-2026/
Such attacks create concerns about the security of systems connecting banks with lending companies and financial technology platforms.
Why Are Third-Party Technology Providers a Concern?
Banks increasingly depend on external service providers for digital lending, payment processing, customer information management and transaction services.
These connections allow financial institutions to exchange information and automate banking activities. However, poorly secured interfaces can expose multiple organisations to cyber threats. CERT-In warned on October 9 about attacks involving stolen credentials belonging to payment aggregators, gateways and partner banks.
The advisory identified suspicious activities involving unauthorised transfers, fictitious loan references and transactions routed to mule accounts. A compromised technology provider could potentially expose several financial institutions simultaneously.
What Do Recent Data Breach Investigations Reveal?
State Bank of India is investigating a suspected data exposure after approximately 3.75 lakh records reportedly appeared on the dark web.
A preliminary examination identified 3,897 records containing personally identifiable information. The bank said there was no material impact on its operations. AU Small Finance Bank is separately investigating a potential data leak involving a third-party software platform containing limited vehicle-loan customer information. The bank maintained that its internal systems remained unaffected and services continued normally. Claims concerning the extent of the alleged exposure have not been independently verified.
What Measures Are Regulators Seeking?
The RBI has increased its scrutiny of cybersecurity compliance, API vulnerabilities and preparedness for emerging AI-related threats. In an October 19 advisory, the regulator asked institutions to treat potentially exposed technology environments as compromised until forensic examinations establish their security.
CERT-In also flagged risks involving AI agents accessing live systems through exposed credentials and permissive cloud configurations. Financial institutions need stronger authentication, continuous transaction monitoring, independent beneficiary verification and regular assessments of third-party security.
The420 Insight: What Does This Mean?
Cybersecurity is increasingly becoming a financial stability concern rather than merely a technology issue. For banks and NBFCs, successful attacks can result in financial losses, regulatory exposure, operational disruption and declining customer confidence.
As financial systems become more interconnected, effective cybersecurity controls will play an increasingly important role in protecting customer information, maintaining profitability and strengthening institutional resilience.
