RBI asks banks, payment firms to forensically clear tech environments in case

Benchmarks Nifty22,687.65-123.7FEATURED FUNDS★★★★★UTI Aggressive Hybrid Fund Regular Plan-Growth5Y Return8.76 % Invest NowFEATURED FUNDS★★★★★Motilal Oswal Midcap Fund Direct-Growth5Y Return18.76 % Invest NowEnter search text:

The Economic Times daily newspaper is available online now. Read Today's Paper

RBI asks banks, payment firms to forensically clear tech environments in case of a data breach

RBI asks banks, payment firms to forensically clear tech environments in case of a data breach

By Saloni Shukla, ET BureauLast Updated: Oct 23, 2026, 12:37:00 AM ISTSynopsis

The RBI has asked financial entities to remove management and administrative interfaces from public internet access, enforce multi-factor authentication for administrative access, and restrict access to cloud and backend systems on a least-privilege basis. The measures include auditing source code, repositories, configuration files, client applications and cloud storage for exposed credentials, and immediately rotating and purging compromised credentials.

MUMBAI: The Reserve Bank of India (RBI) has directed banks, payment system operators and other entities under its purview to treat their technology environments as compromised until forensically cleared following any exposure of credentials or confirmed unauthorised access.

The RBI issued the advisory on October 19, shortly after the Indian Computer Emergency Response Team (CERT-In) warned about the growing use of artificial intelligence agents to carry out cyberattacks.

The advisory, which ET has reviewed, said financial entities should strengthen cybersecurity controls across their own systems and those of third-party service providers.

Also Read: Extent of rate hike cycle to depend on growth-inflation outlook: RBI Governor

The RBI has also asked financial entities to remove management and administrative interfaces from public internet access, enforce multi-factor authentication for administrative access, and restrict access to cloud and backend systems on a least-privilege basis. The measures include auditing source code, repositories, configuration files, client applications and cloud storage for exposed credentials, and immediately rotating and purging compromised credentials.

Live Events

Entities have also been directed to maintain an inventory of application programming interfaces (APIs) and shut down dormant, deprecated and test APIs and accounts. The RBI has also asked regulated entities to report such incidents to its central office and the relevant regional office within the stipulated timeline.

"Regulated entities are advised to leverage the information given in the CERT-in advisory and ensure implementation of appropriate measures by them and their third-party service providers," the advisory said.

The RBI has asked regulated entities to strengthen real-time monitoring of APIs, including systems capable of detecting sudden bursts of automated requests, bulk data extraction and suspicious account registrations.

Also Read: Inflation remains top of mind, MPC minutes show

On October 15, CERT-In warned that attackers were increasingly using autonomous AI tools to identify vulnerabilities, execute commands and exploit security weaknesses without continuous human intervention.

"In the financially motivated campaign against Indian entities, agentic tooling compressed the time between initial access and final impact from days to a few hours," CERT-In said in the advisory annexed to the RBI communication.

The cybersecurity agency found that attackers were using multiple AI agents simultaneously to conduct reconnaissance, exploit vulnerabilities and access sensitive information.

CERT-In said several Indian etities were unaware that their systems had been accessed by AI agents. The incidents came to light only after voluntary disclosures by AI model providers, whose systems had accessed live business records, personal information and confidential data beyond their assigned authorisation.

In recent weeks, a series of cybersecurity incidents has hit Indian financial and technology entities. Earlier this month, ET reported that around 20 financial institutions had been targeted in which stolen partner-bank credentials and vulnerabilities in payment and disbursement APIs were allegedly exploited to siphon off funds.
Add as a Reliable and Trusted News Source Add Now!
(You can now subscribe to our ETMarkets WhatsApp channel)
Read More News onRBIcyberattacksartificial intelligenceapplication programming interfacesfinancial entities

(What's moving Sensex and Nifty Track latest market news, stock tips, Budget 2025, Share Market on Budget 2025 and expert advice, on ETMarkets. Also, ETMarkets.com is now on Telegram. For fastest news alerts on financial markets, investment strategies and stocks alerts, subscribe to our Telegram feeds .)

Top Trending Stocks: SBI Share Price, Axis Bank Share Price, HDFC Bank Share Price, Infosys Share Price, Wipro Share Price, NTPC Share Price

...moreless
(You can now subscribe to our ETMarkets WhatsApp channel)
Read More News onRBIcyberattacksartificial intelligenceapplication programming interfacesfinancial entities

(What's moving Sensex and Nifty Track latest market news, stock tips, Budget 2025, Share Market on Budget 2025 and expert advice, on ETMarkets. Also, ETMarkets.com is now on Telegram. For fastest news alerts on financial markets, investment strategies and stocks alerts, subscribe to our Telegram feeds .)

Top Trending Stocks: SBI Share Price, Axis Bank Share Price, HDFC Bank Share Price, Infosys Share Price, Wipro Share Price, NTPC Share Price

...morelessPrime ExclusivesInvestment IdeasStock Report PlusePaperWealth Edition

• KYB and KYC: Business behind the wealth creator called “Divi’s Lab” – Part 1

• The global business of promising more

• One company, 2 words. Bond yield and CDS: Will they decide the fate of global markets?

• Business of Odd Things: Inside an industry that farms fish that nobody is meant to eat

• War's second-order effects are becoming visible in critical sectors

• US mid-term elections – Part 2: What does it mean for Trump to lose control of Congress?

• 1
• 2
• 3

View all StoriesContinue reading with one of these options:Limited AccessFreeLogin to get access to some exclusive stories
& personalised newslettersLogin NowUnlimited AccessStarting @ Rs120/monthGet access to exclusive stories, expert opinions &
in-depth stock reportsSubscribe NowET

Unlock Access to All Exclusives with ETPrime FREE TRIAL

15 Days Free: Unlock All ETPrime Exclusives, Market Tools & ePapers

Trial offer expiring in00 : 05 : 00

I'd rather pay ₹2599 now

Uh-oh! This is an exclusive story available for selected readers only.

Worry not. You’re just a step away.

Prime Account Detected!

It seems like you're already an ETPrime member with

Login using your ET Prime credentials to enjoy all member benefits

Log out of your current logged-in account and log in again using your ET Prime credentials to enjoy all member benefits.

Unlock ETPrime's Exclusive Stories Today!

Big Price Drop! Flat 40% Off

Student Only OfferAlready a Member? Sign In nowAlready a Member? Sign In nowAlready a Member? Sign In now

Offer Exclusively For You

Save up to Rs. 700/-

ON ET PRIME MEMBERSHIP

Avail Offer

Offer Exclusively For You

Get 1 Year Free

With 1 and 2-Year ET prime membership

Avail Offer

Offer Exclusively For You

Get 1 Year Free

With 1 and 2-Year ET prime membership

Avail Offer

Offer Exclusively For You

Get Flat 40% Off

Then ₹ 1749 for 1 year

Avail Offer

Offer Exclusively For You

ET Prime at ₹ 49 for 1 month

Then ₹ 1749 for 1 year

Avail Offer

Special Offer

Get flat 40% off on ETPrime

Avail OfferAvail OfferClaim NowAlready a Member? Sign In now

Need Assistance?

Connect with an ETPrime expert for personalized support and guidance

+91 9484700004'; }); } if(listing) { var h3 = "You tried reading " + listArr.length + " locked stories in the past " + threshold + " days.", h4 = "Become an ET Prime member and don't miss out on these exclusive stories."; var html = '

' + h3 + '

' + h4 + '

' + listing + '

'; $('#paidSCWidget').html(html); var callback = $('#paidSCWidget').attr('data-callback'); if(callback && window[callback]) { window[callback](); } customDimension.dimension72 += ' | Shown SYFT no Trial_With Missed Paywalled Articles Collection'; } else { _processNormal() } } }); } else { _processNormal(); } } catch (e) { _processNormal(); } }, function () { _processNormal(); }); //console.log('storyCollectionLoad', $); }

What’s Included with

ETPrime Membership

1Exclusive Insights That Matter

Uncover the truth with our investigative stories

Make strategic moves using the real-world case studies

Read industry-specific stories to identify emerging trends

Spot opportunities with
in-depth insights that matter

• Trump temper on H-1B visas is forcing Indians to do these things to stay put in US

  What Adani’s US indictment means for India Inc’s overseas fundraising

• Why veterans like Reliance, L&T are on acquisition spree? Aswath Damodaran has an answer.

  Will China’s dollar bond sale in Saudi Arabia trump the US in financial world?

• Huawei launches its own OS to compete with Google and Apple. But can it win beyond China?

  The problem with lab grown diamonds

• Why a falling rupee is a better option for the economy

  A list of top 20 momentum stocks that have delivered massive returns in one year

2Invest Wisely With Smart Market Tools & Investment Ideas

Alpha Trade

Get daily trade ideas from SEBI-registered research analysts.

Investment Ideas

Grow your wealth with stock ideas & sectoral trends.

Stock Reports Plus

All-in-one stock research with Stock Score, peer comparison & key signals.

BigBull Portfolio

Get to know where the market bulls are investing to identify the right stocks.

Stock Analyzer

Check the score based on the company's fundamentals, solvency, growth, risk & ownership to decide the right stocks.

Market Mood

Analyze the market sentiments & identify the trend reversal for strategic decisions.

Stock Talk Live at 9 AM Daily

Ask your stock queries & get assured replies by ET appointed, SEBI registered experts.

3Stay informed anytime, anywhere with ET ePaper

ePaper - Print View

Read the PDF version of ET newspaper. Download & access it offline anytime.

ePaper - Digital View

Read your daily newspaper in Digital View & get it delivered to your inbox everyday.

Wealth Edition

Manage your money efficiently with this weekly money management guide.

TOI ePaper

Read the PDF version of TOI newspaper. Download & access it offline anytime.

Deep Explainers

Explore the In-depth explanation of complex topics for everyday life decisions.

Health+ Stories

Get fitter with daily health insights committed to your well-being.

Personal Finance+ Stories

Manage your wealth better with in-depth insights & updates on finance.

5Enjoy Complimentary Subscriptions From Top Brands

Stream new documentaries from all across the world every day.

Stories you might be interested in