SBI Files FIR Over Leak of Customers’ Personal Data

A case of data leak at the State Bank of India (SBI) has come to light. According to reports, cybercriminals hacked into the central server of SBI’s Global IT Center located in Navi Mumbai’s CBD-Belapur and stole millions of records. The stolen data is said to include customers’ personal information, loan applications, and bank account documents. On 12th November, SBI filed an FIR in this case. Surprisingly, the data theft occurred in October, but the bank filed a police complaint almost a month later, on November 12th.

According to a Times of India report, the cyber attack occurred between October 10th and 15th. Bank officials became aware of the incident when they discovered the stolen data had been uploaded to the dark web. The bank’s internal team subsequently launched an investigation and reported the matter to the police.

On 21 October 2026, SBI had informed about the data leak. During the preliminary analysis of approximately 375,000 records available on the dark web, SBI identified 3,897 customer records containing Personally Identifiable Information (PII).

3.75 lakh bank records claimed to have been stolen

According to SBI’s complaint, unidentified individuals affiliated with a hacker group called “Siriussim” gained unauthorized access to the bank’s Global IT Center servers. Subsequently, approximately 32 CSV files containing approximately 375,000 records were stolen. Additionally, JSON files and 2,721 PDFs were also reported stolen. These documents are claimed to contain personal information of approximately 4,280 customers.

What customer information was leaked?

According to the report, the stolen data included customer names and other personal information, contact numbers, home addresses, loan application records, and bank account opening forms. Some of the information was also uploaded to the dark web. This could pose a significant risk of misuse of customer personal and financial information.

What action did SBI take?

The bank informed the police that it had removed the stolen data from the dark web and attempted to ensure it was not misused. A police complaint was subsequently filed to investigate the matter and identify those responsible for the cyberattack. However, despite the claim of data removal, it is unclear whether the stolen information had previously been accessed by any other individuals or groups.

How data leak was reported?

An anonymous hacker group called “Siriusim” claimed the reported hack threatens to expose the confidential data of as many as 3.75 lakh SBI customers. The breach was first reported by Cybersecurity account CyberPulse56 on X. The hacker group made their claims on BreachForums, a dark web forum. The group alleges that it has over 3,75,000 rows in comma-separated values (CVS) format and 2,722 PDF files.

Earlier in July 2026, Bank of Baroda reportedly became the target of a major cyberattack. According to reports, a hacker claimed to have breached the bank’s systems and released around 1TB of sensitive data on the dark web for free. The alleged leaked data was said to contain both personal and corporate banking information collected from multiple Bank of Baroda branches across India. Bank of Baroda had also confirmed the leak. Click here to read news.