| ➡️ Click here to Join Whatsapp News Group - Get instant updates of all Banking News |
The SBI has confirmed Data Leak affecting it’s customers. The details of customers have been leaked online in dark web. According to the bank, it received alerts about the suspected data exposure on October 16, 2026, from its Threat Intelligence Service Provider, the Defence Cyber Agency and the Indian Computer Emergency Response Team (CERT-In).
SBI has also informed BSE and NSE about the data leak.
3,897 Customer Records Containing Personal Information Identified
During the preliminary analysis of approximately 375,000 records available on the dark web, SBI identified 3,897 customer records containing Personally Identifiable Information (PII).
The following details of customers have been leaked online:
- Customers’ registered mobile numbers
- Dates of birth
- Names and gender
- Email addresses
- Residential addresses
- Branch identifiers
- Customer Information File (CIF) identifiers
- Lead IDs
- Metadata related to loan and lead records
- Information associated with other related files
The bank will conduct a detailed investigation to verify the authenticity and completeness of the exposed data. The bank is also working to identify the possible source of the exposure, determine its extent and assess the risks to customers and the bank.
Response from SBI
Following the incident, SBI promptly activated its cyber incident response and containment protocols.
The bank also engaged an independent cybersecurity agency empanelled with CERT-In to conduct a comprehensive assessment. The agency will investigate the nature and extent of the suspected data compromise.
SBI stated that a detailed assessment is underway and that appropriate corrective and preventive measures are being implemented as required.
No Material Impact on Banking Operations
SBI has clarified that the incident has not had any material impact on its core business operations, financial performance or business continuity.
According to the bank, its core banking functions continue to operate normally without disruption. The bank is closely monitoring the situation and taking appropriate measures in line with applicable regulatory requirements.
How data leak was reported?
An anonymous hacker group called “Siriusim” claimed the reported hack threatens to expose the confidential data of as many as 3.75 lakh SBI customers.
The breach was first reported by Cybersecurity account CyberPulse56 on X. The hacker group made their claims on BreachForums, a dark web forum. The group alleges that it has over 3,75,000 rows in comma-separated values (CVS) format and 2,722 PDF files.
Siriusim has published four sample customer records. Alongside this, the hacker group claims that it has access to personal customer information, loan applications, and supporting documents.
The Hacker claims to have following data of SBI Customers:
- Personal information
- Loan applications and supporting documents
- Account-opening applications
- Address and other application-related details
If this is true, then the dataset may contain Know Your Customer (KYC) records, Aadhar numbers, account-opening forms and residential addresses. However, the authenticity and the extent of this breach remain unverified. It is also unclear whether this data is new or recycled from prior leaks.
If genuine, the data could be used for identity theft and cyberfraud. Criminals could also combine leaked personal details with AI-generated messages, cloned voices or deepfake videos to target victims.
Earlier in July 2026, Bank of Baroda reportedly became the target of a major cyberattack. According to reports, a hacker claimed to have breached the bank’s systems and released around 1TB of sensitive data on the dark web for free. The alleged leaked data was said to contain both personal and corporate banking information collected from multiple Bank of Baroda branches across India. Bank of Baroda had also confirmed the leak. Click here to read news.
