A significant security flaw identified in the YONO SBI banking application exposes millions of users to cybersecurity threats. The vulnerability, CVE-2025-45080, affects version 1.23.36 of the app, allowing unencrypted data transmission due to insecure network configuration settings. This enables man-in-the-middle attacks, putting banking credentials, transactions, and personal data at risk of theft, especially on public Wi-Fi networks.

Several Indian banks have taken drastic steps in response to a security breach that may have compromised up to 3.25 million debit cards—or 0.5% of the approximately 700 million debit cards that Indian banks have issued. The financial institution is Hitachi Payment Services, a subsidiary of Hitachi Ltd. that oversees ATM network processing for Yes Bank Ltd., according to banking industry insiders. After that, the State Bank of India quickly disabled a few clients' debit cards, and it was currently replacing those cards to stop fraud. The top three private sector lenders, ICICI Bank, HDFC Bank, and Axis Bank, each stated in separate announcements that there may have been card account breaches following usage at non-bank ATMs. Additionally, certain consumers' debit cards are being reissued by Standard Chartered's Indian division.