Inaccurate Reporting Regarding RBI Data Breach: CyberExpress by Cyble Erroneously Links Rural Business Incubator (RBI) to Reserve Bank of India and Issues public Advisory

**Executive summary:** CloudSEK's XVigil detected a SQL injection compromise of the Indian Rural Business Incubator (RBI) on 18 Feb 2024 (endpoint: https://ukrbi.in/new2/admin/index.php) that exposed roughly 2,000 applicant records and 48 admin records; the report corrects earlier misattribution to the Reserve Bank of India and attributes the leak to an actor calling themselves "ZALCYBER."