SBI Confirms Data Loss Incident After Customer Records Found on Dark Web
SBI confirms 3,897 customer records found on the dark web; investigators are verifying the data’s source.
You're reading Entrepreneur India, an international franchise of Entrepreneur Media.
State Bank of India (SBI) has disclosed a data loss incident after a preliminary review found 3,897 customer records containing personal information on the dark web. The bank reported this in an October 21, 2026, stock exchange filing, saying investigators still need to establish the data’s authenticity, completeness and source. It said services continue to operate normally, with no material impact on core operations, financial performance or business continuity.
SBI received alerts on October 16 from its threat intelligence provider, the Defense Cyber Agency and CERT-In about suspected exposure of customer information. Investigators reviewed about 375,000 records and identified 3,897 containing personally identifiable information. The larger figure should not be read as 375,000 confirmed victims, as record counts can include repeated entries.
The data reportedly included names, registered mobile numbers, dates of birth, gender, email and residential addresses, along with branch and customer information file identifiers, lead IDs and metadata linked to loan and lead records. The filing does not list passwords, PINs or OTPs among the exposed information, and reports no stolen funds. It also does not identify an entry point, vulnerability or attacker, so the incident cannot be attributed to ransomware, phishing or a specific flaw.
SBI activated its incident response procedures and hired an independent cybersecurity agency approved by CERT-In to examine the extent of the suspected breach, assess risks to customers and the bank, and identify the data’s source. Remedial and preventive measures are being implemented.
Customers should treat unexpected calls and messages with caution, verify them through official banking channels, avoid unfamiliar links, never share PINs or OTPs, and check statements for unauthorised transactions.
State Bank of India (SBI) has disclosed a data loss incident after a preliminary review found 3,897 customer records containing personal information on the dark web. The bank reported this in an October 21, 2026, stock exchange filing, saying investigators still need to establish the data’s authenticity, completeness and source. It said services continue to operate normally, with no material impact on core operations, financial performance or business continuity.
SBI received alerts on October 16 from its threat intelligence provider, the Defense Cyber Agency and CERT-In about suspected exposure of customer information. Investigators reviewed about 375,000 records and identified 3,897 containing personally identifiable information. The larger figure should not be read as 375,000 confirmed victims, as record counts can include repeated entries.
The data reportedly included names, registered mobile numbers, dates of birth, gender, email and residential addresses, along with branch and customer information file identifiers, lead IDs and metadata linked to loan and lead records. The filing does not list passwords, PINs or OTPs among the exposed information, and reports no stolen funds. It also does not identify an entry point, vulnerability or attacker, so the incident cannot be attributed to ransomware, phishing or a specific flaw.
