State Bank of India probes dark web exposure of 3,897 customer records
State Bank of India disclosed that 3,897 customer records were exposed on the dark web following alerts from Indian cybersecurity agencies. The bank appointed an independent investigator and assured customers that their money remains safe.
State Bank of India informed stock exchanges on October 21, 2026, that it is investigating the suspected dark web exposure of 3,897 customer records containing personally identifiable information. The disclosure followed alerts received on October 16 from the bank's threat intelligence service provider, the Defence Cyber Agency, and CERT-In.[1][2][7]
A preliminary analysis of approximately 375,000 records found on the dark web identified the affected SBI customer records. The compromised data reportedly included customer names, registered mobile numbers, email and residential addresses, dates of birth, gender, branch and customer information file (CIF) identifiers, lead IDs, and loan record metadata.[3][4][6]
SBI activated its cyber response protocols and appointed an independent cybersecurity agency to establish the authenticity, source, and scope of the exposure. In a public statement on X, the bank reassured account holders that their money remains safe and that the incident did not materially disrupt its core banking operations, IT systems, or business continuity. The Economic Times later reported that SBI has notified its cyber insurance provider as it assesses the incident's impact.[2][8][9][10]
Key facts
- State Bank of India identified 3,897 customer records containing personally identifiable information among roughly 375,000 dark web records.
- The probe began after SBI received alerts on October 16, 2026, from CERT-In, the Defence Cyber Agency, and a threat intelligence provider.
- Exposed information reportedly included names, phone numbers, email and postal addresses, dates of birth, gender, branch and CIF identifiers, and loan metadata.
- SBI notified stock exchanges about the breach on October 21, 2026, and engaged an independent cybersecurity agency to investigate.
- SBI stated that customer funds are safe and that the incident had no material effect on IT systems, core operations, or business continuity.
- SBI alerted its cyber insurance provider while weighing the impact of the data leak, according to the Economic Times.
Sources · 6 sources
- TH
The Hindu@the_hinduPost on X ·
State Bank of India is investigating the suspected exposure of 3,897 customer records containing personally identifiable information on the dark web, following alerts received from its threat intelligence service provider, the Defence Cyber Agency and CERT-In on October 16. https://t.co/76arFhCLfL
Open source - TT
The Times Of India@timesofindiaPost on X ·
The State Bank of India (SBI) on Wednesday said that it has identified 3,897 customer records containing personally identifiable information (PII) in data suspected to have been exposed on the dark web. The bank has launched a detailed investigation to establish the authenticity, source and extent of the alleged exposure. More details🔗 https://t.co/lUajS5RJf1 Catch every update on the TOI App 👉 https://t.co/ogFaRsVinV #SBI #StateBankOfIndia #CyberSecurity #DarkWeb #DataBreach #DataSecurity
Open source - ㆅ
ㆅ@howfxrPost on X ·
State Bank of India (SBI) confirms a suspected data breach after 3,897 customer records containing personally identifiable information were identified among approximately 375,000 records found on the dark web. 🧵 https://t.co/csaEwO2NeW
Open source - ET
Economic Times@EconomicTimesPost on X ·
Dark web leak jolts India’s biggest bank | State Bank of India is investigating a suspected data breach after around 3.75 lakh records linked to the country’s largest lender surfaced on the dark web, the latest cyber incident to hit the financial sector at a time when India’s cybersecurity agency has warned that attackers are increasingly using artificial intelligence to accelerate attacks on financial institutions. SBI said preliminary analysis of approximately 375,000 records available on the dark web identified 3,897 customer records containing personally identifiable information (PII). The exposed information reportedly included registered mobile numbers, dates of birth, names, gender, email and residential addresses, branch and customer information file (CIF) identifiers, lead IDs and metadata associated with loan and lead records. Full Report Here 👇 https://t.co/vuvfymlppC #SBI #Banking #CyberSecurity #DataBreach #India #Technology
Open source - ET
Economic Times@EconomicTimesPost on X ·
SBI weighs data leak impact, alerts cyber cover provider https://t.co/UA02lBZ4LM
Open source - BU
businessline@businesslinePost on X ·
State Bank of India has reported a cyberattack that exposed 3,897 customer records on the dark web, including names, contact details, residential addresses and loan records. An independent cybersecurity agency will investigate the breach. https://t.co/PXUlMlon66
Open source - TH
The Hindu@the_hinduPost on X ·
Public Sector bank State Bank of India (SBI), the country’s biggest commercial bank with 53 crore customers and a FY26 net profit of over ₹80,000 crore, informed stock exchanges on Wednesday (October 21, 2026), about a customer data breach on the Dark Web. What did SBI say in the stock exchange filing, and what does the data breach at SBI mean? ✍️@lalatendumishr3 https://t.co/p5IQ27MTWn
Open source - ET
Economic Times@EconomicTimesPost on X ·
SBI weighs data leak impact, alerts cyber cover provider https://t.co/UA02lBZCBk
Open source - IN
Inc42@Inc42Post on X ·
SBI Data Leak: 3.75 Lakh Records Reportedly Surface On Dark Web. 👇 Reports suggest that nearly 3.75 lakh records, containing names, phone numbers, IDs and loan-related details, have surfaced on the dark web. SBI has activated its cyber response protocols and appointed an independent cybersecurity agency to investigate the reported leak. The bank says preventive measures are underway, but the investigation is ongoing and specific fixes have not yet been detailed. What does this reported data leak mean for SBI customers? Share your thoughts below. #SBI #CyberSecurity #DataBreach #DigitalBanking #Reels #Inc42 #fyp
Open source - ET
Economic Times@EconomicTimesPost on X ·
SBI says your money is safe even after a data leak hit its systems | State Bank of India said a recent cyber incident involving a data leak affected a very small number of customers, assuring account holders in a social media post on X that their money remains safe and the incident had not materially affected its information technology systems, core business operations, financial performance or business continuity 📖 FULL STORY ➠ https://t.co/yAWt9zUJJy #SBI #Banking #CyberSecurity #India #Finance
Open source