State Bank of India (SBI) has told the stock exchanges that 3,897 customer records containing personal information were found on the dark web. The bank says core banking operations are unaffected, and an investigation is underway.
What Happened
On October 16, SBI received alerts from its threat intelligence provider, the Defence Cyber Agency and CERT-In, warning that customer information might be exposed. On October 21, the bank disclosed the incident in a stock exchange filing.
The alerts followed a claim by an anonymous actor calling itself “Siriusim” on the dark web forum BreachForums. The actor claimed to hold about 3.75 lakh customer records and 2,722 PDF documents and shared four sample records.
Key Facts at a Glance
| Detail | What We Know |
|---|---|
| Records flagged | 3,897 containing personal information, found among about 3.75 lakh records circulating online |
| Data types | Names, mobile numbers, dates of birth, gender, email and residential addresses, plus branch and customer file identifiers and loan-lead metadata |
| Alert date | October 16, 2026 |
| Disclosure date | October 21, 2026 (stock exchange filing) |
| Core banking | SBI says operations, financial performance and business continuity are not materially affected |
| Response | Incident response activated, independent CERT-In-empanelled agency engaged |
Details are based on reports of SBI’s filing by Entrepreneur India and Outlook Money.
What We Still Don’t Know
- Whether the data is authentic and complete. SBI says that still has to be established.
- How the data got out, and whether it came from SBI directly, a partner or an older leak.
- Who was responsible. The bank has not named any attacker.
Should SBI Customers Worry?
The exposed data appears to be personal details, not passwords or account balances. But names, phone numbers and addresses are exactly what fraudsters use to sound convincing. Phishing and impersonation calls often follow incidents like this.
What You Should Do Now
| Step | Why It Matters |
|---|---|
| Never share your OTP, PIN or CVV | No genuine bank staff will ask for these |
| Be wary of calls or SMS quoting your personal details | Scammers use leaked data to build trust |
| Don’t click links in unexpected messages | Type the bank’s address or use the official app instead |
| Check your statements regularly | Spot unauthorised activity early |
| Report suspicious calls at cybercrime.gov.in or on 1930 | Fast reporting helps freeze fraud |
The Bigger Picture
This is a reminder that even India’s largest public sector bank is a target. The disclosure itself is a positive sign, since it was made promptly to the exchanges after the alerts. The real test will be how clearly SBI shares what it learns. For background, see how the dark web works and how phishing scams operate.
Stay on top of tech and security stories on TechnoSports, and don’t miss our coverage of the Jio Platforms IPO.
Frequently Asked Questions
How many SBI customers were affected?
SBI identified 3,897 records containing personal information. The bank is still verifying the wider dataset.
Is my SBI account safe?
SBI says core banking operations are unaffected. Stay alert for phishing and never share OTPs or PINs.
Who is behind the leak?
This is unconfirmed. A dark web actor calling itself “Siriusim” claimed responsibility, but SBI has not attributed the incident.
Sources: Beats in Brief on X, Entrepreneur India, Outlook Money, YourStory.
