RBI Imposes ₹65 Lakh Penalty on AP Mahesh Cooperative Urban Bank for Cyber Security Non-Compliance

Strategic Insights -

The Reserve Bank of India (RBI) has slapped a ₹65 lakh penalty on AP Mahesh Cooperative Urban Bank (APMCUB) for non-compliance with the Cyber Security Framework for Primary (Urban) Cooperative Banks. In January 2022, hackers breached the bank's security systems, siphoning off ₹12.48 crore. An investigation by the police revealed the bank's alleged negligence in implementing cyber security measures, highlighting critical security lapses that led to the RBI imposing the monetary penalty. The Hyderabad police commissioner had written to the RBI governor, requesting the suspension of the bank's licence to operate, citing the bank's failure to adhere to RBI guidelines on cyber security components such as anti-phishing applications and intrusion prevention and detection systems.

Key Takeaways:

  • The RBI imposed a ₹65 lakh penalty on AP Mahesh Cooperative Urban Bank (APMCUB) for non-compliance with the Cyber Security Framework for Primary (Urban) Cooperative Banks.
  • The bank was targeted by hackers in January 2022, who siphoned off ₹12.48 crore through a series of phishing emails that compromised the bank's network.
  • The police investigation, aided by the RBI's cyber audit, revealed that the bank's security lapses were the primary cause of the breach.
  • The RBI guidelines on cyber security components, including anti-phishing applications and intrusion prevention and detection systems, were found to be absent in the bank's cyber security infrastructure.
  • The cyber crime police nabbed six offenders, including two Nigerian nationals, in connection with the incident.
  • The RBI's penal action against APMCUB serves as a reminder to all banks to adhere to cyber security practices to avoid loss of public money and crucial data.

Statistics:

  • ₹12.48 crore: the amount of money siphoned off through the cyber attack.
  • ₹65 lakh: the monetary penalty imposed on AP Mahesh Cooperative Urban Bank by the RBI.
  • 6: the number of offenders arrested in connection with the cyber attack, including two Nigerian nationals.
  • 1: the number of years in which the cyber attack took place (January 2022).

Sources:

  • RBI's penal action against AP Mahesh Cooperative Urban Bank
  • Hyderabad police commissioner CV Anand's letter to RBI governor
  • RBI guidelines on cyber security components