State Bank of India confirms 3,897 customer records exposed on the dark web

The countrys largest lender State Bank of India on Wednesday reported a cyberattack that resulted in 3897 customer records exposed on the dark webThe exposed information reportedly included customers registered mobile numbers dates of birth names gender email addresses residential addresses branch and CIF identifiers lead IDs and metadata associated with loanlead records and other related files it saidOn 16 October 2026 the Bank received communications from its Threat Intelligence Service Provider the Defence Cyber Agency and CERTIn regarding an alert concerning the suspected exposure of the Bankrsquos customer data on the dark web State Bank of India said in a regulatory filingThe bank said that during the preliminary analysis of approximately 375000 records available on the dark web 3897 customer records containing Personally Identifiable Information PII were identifiedSBI launches investigationA detailed investigation was required to establish the authenticity and completeness of the exposed data determine the potential source and extent of the exposure and assess the associated risks to customers and the Bank it saidThe staterun bank said it activated its cyber incident response and containment protocolsAdditionally an independent CERTInempanelled cybersecurity agency was engaged to conduct a comprehensive assessment and investigate the nature and extent of the alleged compromise it saidDoes not expect any impact on core businessThe lender said it does not expect any material impact on bankrsquos core business operations financial performance or business continuity due to the data breachThe Bankrsquos core business functions continue to operate normally without disruptions A detailed assessment is currently underway and appropriate remedial and preventive measures are being implemented as required We reassure that the Bank continues to monitor the situation closely and take all appropriate measures in accordance with applicable regulatory requirements it saidIn a message posted on its official X account SBI told customers the incident had impacted ldquoa very very small number of customersrdquo and assured them that balances were ldquocompletely saferdquo The bank said the episode did not affect its IT systems core business operations financial performance or business continuity and that protecting customer data and trust remained its highest priorityhttpstcoJ7aDscxFHZmdash State Bank of India TheOfficialSBI October 21 2026Hacker group claims to have access to SBI dataAn unidentified hacker group operating under the name lsquoSiriusimrsquo claimed to have obtained confidential customer information allegedly linked to SBI including personal details loan applications and accountopening documents according to news agency IANSThis was highlighted by cybersecurity monitoring account CyberPulse56 in a post on social media platform XThe hacker group allegedly possesses 375 lakh data entries in CSV format and 2722 PDF documents associated with the countrys largest public sector lender as per IANSBOB data breachIn July Bank of Baroda had initiated a forensic investigation into an alleged data breach where a hacker had claimed to possess around 1 TB of sensitive data including records of savings and current accounts loanrelated information internet banking user details NRI and corporate banking records customer support data and information linked to bank branches and ATMsWith inputs from IANS