Company Details
sbi-card
21,634
181,627
52
sbicard.com
4
SBI_3287845
Completed

SBI Card Company CyberSecurity Posture
sbicard.comSBI Card was launched in 1998 with the State Bank of India, India's largest bank, as the majority stakeholder. In March 2020, SBI Card was listed on BSE and NSE. Today, SBI Card is India’s largest pure-play credit card issuer with over 19.5 million cards in force, as of September 2024. Its wide array of products and services caters to a diverse range of customer segments across India, right from new-to-credit to super premium. The SBI Card brand is based on the value proposition of 'Make Life Simple'. The proposition manifests in SBI Card’s continuous efforts to simplify the lives of its customers, employees and other key stakeholders. Customer-centricity, supported by the values of trust and transparency, is core to SBI Card’s ethos.
Company Details
sbi-card
21,634
181,627
52
sbicard.com
4
SBI_3287845
Completed
Between 750 and 799

SBI Card Global Score (TPRM)XXXX



No incidents recorded for SBI Card in 2025.
No incidents recorded for SBI Card in 2025.
No incidents recorded for SBI Card in 2025.
SBI Card cyber incidents detection timeline including parent company and subsidiaries

SBI Card was launched in 1998 with the State Bank of India, India's largest bank, as the majority stakeholder. In March 2020, SBI Card was listed on BSE and NSE. Today, SBI Card is India’s largest pure-play credit card issuer with over 19.5 million cards in force, as of September 2024. Its wide array of products and services caters to a diverse range of customer segments across India, right from new-to-credit to super premium. The SBI Card brand is based on the value proposition of 'Make Life Simple'. The proposition manifests in SBI Card’s continuous efforts to simplify the lives of its customers, employees and other key stakeholders. Customer-centricity, supported by the values of trust and transparency, is core to SBI Card’s ethos.


Dubai Holding is a diversified global investment company that continues to power Dubai’s growth across 10 key sectors, including real estate, hospitality, leisure & entertainment, media, ICT, design, education, retail, manufacturing & logistics and science. Since 2004, we have made strides with an
Truist Financial Corporation is a purpose-driven financial services company committed to inspiring and building better lives and communities. As a leading U.S. commercial bank, Truist has leading market share in many of the high-growth markets across the country. Truist offers a wide range of produc

In Asia and Africa, Prudential has been providing familiar, trusted financial security to people for 100 years. Today, headquartered in Hong Kong and London, we are ranked top three in 12 Asian markets with 18 million customers, around 68,000 average monthly active agents and access to over 27,000 b

Built on a foundation of trust, integrity and promise, we proudly serve over 71,000 outstanding organizations and more than 17 million individuals. ¹ We take great pride in helping people with saving, investing and advice, while providing them with the tools and resources they need to help reach the
At State Street, we partner with institutional investors all over the world to provide comprehensive financial services, including investment management, investment research and trading, and investment servicing. Whether you are an asset manager, asset owner, alternative asset manager, insurance com

Welkom op de officiële LinkedIn-pagina van KBC! Bekijk onze vacatures op de tab ‘Vacatures’. KBC is een geïntegreerde bank-verzekeraar die zich hoofdzakelijk richt op particulieren en privatebankingcliënten, en op kleine en middelgrote ondernemingen. KBC heeft een leidende positie in zijn thuisma

Max Group is a $7 billion diversified Indian conglomerate founded by Mr. Analjit Singh with a strong presence across Senior Care, Life Insurance, and Real Estate. Guided by a purpose-driven approach, we aim to create meaningful solutions that improve lives and deliver lasting value. Max India Lim

Bienvenido a la página oficial del Banco BBVA Bancomer. Institución financiera de México desde 1932. Es una empresa filial de Banco Bilbao Vizcaya Argentaria (BBVA), uno de los grupos financieros líderes en Europa y considerado entre uno de los más grandes de la Zona Euro. El Grupo trabaja por un f

Great companies have an enduring sense of purpose. At M&T, our purpose is a simple one: make a difference in people’s lives and uplift the diverse communities we serve. Founded in 1856 in Buffalo, NY we are now a top 11 full-service US-based commercial bank with a retail footprint across the east co
.png)
The Reserve Bank of India (RBI) had asked banks to move their net banking website addresses to the exclusive internet domain - '.bank.in'...
News News: SBI Clerk Prelims 2025 results are anticipated between October 30 and November 2. Candidates who took the exam on September 20,...
SBI Cards downgraded to 'Hold' by Nuvama, but target price maintained; review your investment strategy now.
SBI Cards and Payment Services Limited reported earnings results for the second quarter and six months ended September 30, 2025.
SBI Card, one of India's leading credit card issuers, has announced the appointment of Rajnickant Patel as an Independent Director on its.
Wipro has announced the elevation of Aarti Bansal Lamba as Head – Cyber Risk Governance, recognizing her expertise and leadership in...
Synopsis: Aditya Birla Fashion & Retail Ltd, SBI Cards & Payment Services Ltd, and HCL Technologies Ltd are in focus after Morgan Stanley...
Amazon has announced details of its upcoming Great Indian Festival Sale, one of the most anticipated online shopping events of the year.
SBI & IIT Guwahati conclude FINNOVATION 2025 Hackathon on loan defaulter detection. DFS, IBA laud youth fintech innovation in Gurugram.

Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
The official website of SBI Card is https://www.sbicard.com.
According to Rankiteo, SBI Card’s AI-generated cybersecurity score is 781, reflecting their Fair security posture.
According to Rankiteo, SBI Card currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.
According to Rankiteo, SBI Card is not certified under SOC 2 Type 1.
According to Rankiteo, SBI Card does not hold a SOC 2 Type 2 certification.
According to Rankiteo, SBI Card is not listed as GDPR compliant.
According to Rankiteo, SBI Card does not currently maintain PCI DSS compliance.
According to Rankiteo, SBI Card is not compliant with HIPAA regulations.
According to Rankiteo,SBI Card is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.
SBI Card operates primarily in the Financial Services industry.
SBI Card employs approximately 21,634 people worldwide.
SBI Card presently has no subsidiaries across any sectors.
SBI Card’s official LinkedIn profile has approximately 181,627 followers.
SBI Card is classified under the NAICS code 52, which corresponds to Finance and Insurance.
Yes, SBI Card has an official profile on Crunchbase, which can be accessed here: https://www.crunchbase.com/organization/sbi-card.
Yes, SBI Card maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/sbi-card.
As of November 27, 2025, Rankiteo reports that SBI Card has not experienced any cybersecurity incidents.
SBI Card has an estimated 29,517 peer or competitor companies worldwide.
Total Incidents: According to Rankiteo, SBI Card has faced 0 incidents in the past.
Incident Types: The types of cybersecurity incidents that have occurred include .
.png)
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to versions 19.2.16, 20.3.14, and 21.0.1, there is a XSRF token leakage via protocol-relative URLs in angular HTTP clients. The vulnerability is a Credential Leak by App Logic that leads to the unauthorized disclosure of the Cross-Site Request Forgery (XSRF) token to an attacker-controlled domain. Angular's HttpClient has a built-in XSRF protection mechanism that works by checking if a request URL starts with a protocol (http:// or https://) to determine if it is cross-origin. If the URL starts with protocol-relative URL (//), it is incorrectly treated as a same-origin request, and the XSRF token is automatically added to the X-XSRF-TOKEN header. This issue has been patched in versions 19.2.16, 20.3.14, and 21.0.1. A workaround for this issue involves avoiding using protocol-relative URLs (URLs starting with //) in HttpClient requests. All backend communication URLs should be hardcoded as relative paths (starting with a single /) or fully qualified, trusted absolute URLs.
Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Uncontrolled Recursion vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft deep ASN.1 structures that trigger unbounded recursive parsing. This leads to a Denial-of-Service (DoS) via stack exhaustion when parsing untrusted DER inputs. This issue has been patched in version 1.3.2.
Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Integer Overflow vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft ASN.1 structures containing OIDs with oversized arcs. These arcs may be decoded as smaller, trusted OIDs due to 32-bit bitwise truncation, enabling the bypass of downstream OID-based security decisions. This issue has been patched in version 1.3.2.
Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Prior to versions 7.0.13 and 8.0.2, working with large buffers in Lua scripts can lead to a stack overflow. Users of Lua rules and output scripts may be affected when working with large buffers. This includes a rule passing a large buffer to a Lua script. This issue has been patched in versions 7.0.13 and 8.0.2. A workaround for this issue involves disabling Lua rules and output scripts, or making sure limits, such as stream.depth.reassembly and HTTP response body limits (response-body-limit), are set to less than half the stack size.
Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. In versions from 8.0.0 to before 8.0.2, a NULL dereference can occur when the entropy keyword is used in conjunction with base64_data. This issue has been patched in version 8.0.2. A workaround involves disabling rules that use entropy in conjunction with base64_data.

Get company history
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.