SBI Data Breach: Bank Confirms 3,897 Customer Records Exposed on Dark Web, Says Core Banking Not Affected
State Bank of India has confirmed that 3,897 customer records containing personally identifiable information were found on the dark web after a cyber incident. SBI says core banking operations, financial performance and business continuity remain unaffected.
State Bank of India (SBI) has confirmed a cyber incident in which hackers breached customer records, telling stock exchanges that 3,897 customer records containing personally identifiable information (PII) were suspected to be exposed on the dark web. In its regulatory filing, the country's largest lender said the incident has not materially affected its core operations, financial performance or business continuity, and that it has activated its cyber incident response and containment protocols.
The bank said it received an alert on October 16 from a Threat Intelligence Service Provider, the Defence Cyber Agency and the Indian Computer Emergency Response Team (CERT-In) about the suspected exposure of customer data. A preliminary analysis of about 3,75,000 records found on the dark web identified the 3,897 records that contained personally identifiable information.
What Data Was Exposed
As per the filing, the exposed details reportedly include customers' names, registered mobile numbers, dates of birth, gender, email addresses and residential addresses. State Bank of India Stock Update: Shares Dip on Data Leak News.
The records also contained branch and customer information file identifiers, lead IDs, and metadata linked to loan and lead records and other related files.
SBI Says Core Banking Unaffected
SBI stressed that customer-facing services are running as usual. 'The bank's core business functions continue to operate normally without disruptions,' it said. 'The bank promptly activated its cyber incident response and containment protocols.'
The lender added that a detailed investigation is required to establish the authenticity and completeness of the exposed data, identify its potential source, determine the extent of the exposure and assess the risks to customers and the bank. It said it is monitoring the situation closely and will take appropriate measures in line with applicable regulatory requirements while the probe into the 3,897 identified records continues.
Hacker Group's Claim on BreachForums
India Today Tech had first reported a potential SBI data breach on October 19, citing claims by an anonymous hacker group identified as Siriusim. The group alleged on the dark web forum BreachForums that it had obtained information relating to 3.75 lakh SBI customers. SBI has not named the hacker group involved in the incident.
Rising Scrutiny on Banking Cybersecurity
The incident comes amid increased regulatory focus on cybersecurity in the banking sector. In July, Bank of Baroda acknowledged a data leak that reportedly exposed 1TB of customer data.
(The above story first appeared on LatestLY on Oct 21, 2026 11:50 AM IST. For more news and updates on politics, world, sports, entertainment and lifestyle, log on to our website latestly.com).
