Sbi data leak! 3,897 customers’ details found on dark web

SBI is investigating a suspected data leak after 3,897 customer records were identified on the dark web.

SBI Investigates Dark Web Data Leak After 3,897 Customer Records

The State Bank of India (SBI) is investigating a suspected data leak after personal information linked to 3,897 customer records was identified among approximately 3.75 lakh records found on the dark web.

The exposed information reportedly includes names, mobile numbers, dates of birth, email addresses, home addresses and details linked to loan applications. SBI has said the incident has not materially affected its core banking operations or business continuity.

How Did SBI Discover the Suspected Data Leak?

On 16 October 2026, SBI received alerts about the suspected exposure from its threat intelligence service provider, the Defence Cyber Agency and the Indian Computer Emergency Response Team (CERT-In). The bank examined approximately 3.75 lakh records found on the dark web. Its preliminary analysis identified 3,897 customer records containing personally identifiable information.

SBI activated its cyber incident response procedures and appointed an independent cybersecurity agency empanelled by CERT-In to investigate the incident. The investigation aims to establish whether the exposed information is authentic, identify its possible source and determine the extent of the exposure.

What Customer Information Was Exposed?

According to reports, the information identified in the records included:

  • Customers’ names, mobile numbers and dates of birth
  • Gender, email addresses and residential addresses
  • Bank branch details and customer identification numbers
  • Lead IDs and metadata associated with loan and lead records

Such information can potentially be misused for targeted scams, identity theft and phishing attempts. However, SBI’s investigation is ongoing, and the full extent and source of the suspected exposure have not yet been established.

Who Is Behind the Suspected SBI Data Leak?

An individual or group using the name Siriusim reportedly claimed on the dark web forum BreachForums that it had obtained SBI-related customer information. However, SBI has not publicly confirmed that Siriusim was responsible for the suspected exposure. The source of the data and how it became available online remain under investigation.

The appearance of information on the dark web does not, by itself, establish how it was obtained or whether the bank’s core systems were directly compromised.

Has the SBI Data Leak Affected Customers’ Money?

SBI has stated that the incident has had no material impact on its core business operations, financial performance or business continuity. Its normal banking services continue to operate. The suspected exposure concerns personal information, which is different from confirmation that customers’ bank balances or transaction systems have been compromised.

However, exposed personal details can make customers more vulnerable to fraud attempts. Scammers may use genuine information to impersonate bank employees or send convincing messages asking people to reveal confidential details. Customers should therefore remain alert even if they have not noticed any unusual activity in their accounts.

What Should SBI Customers Do?

  1. Customers can take several precautions to reduce the risk of fraud:
  2. Never share OTPs, PINs or passwords. Bank employees will not need your confidential banking credentials to verify your identity.
  3. Check your transactions regularly. Report any transaction you do not recognise through SBI’s official channels.
  4. Avoid suspicious links. Use SBI’s official website or mobile app instead of links received through unexpected messages or emails.
  5.  Watch out for targeted scams. Be cautious if someone contacts you using your personal details and asks you to transfer money, share an OTP or install an application.
  6.  Check your credit report. Look for unfamiliar loans or credit enquiries that you did not initiate.
  7. Report suspected financial fraud immediately. In India, call 1930 or visit the National Cyber Crime Reporting Portal at https://cybercrime.gov.in.

Customers should not panic or close their accounts solely because of the reported exposure. They should remain cautious and follow official updates from the bank.

SBI Continues Its Investigation

SBI is continuing to assess the suspected data exposure and identify the appropriate corrective and preventive measures.

The incident highlights the risks financial institutions face when personal information becomes accessible outside secure systems. It also shows why protecting customer data is important even when normal banking services continue without disruption.

Until the investigation establishes the source and full extent of the exposure, the responsibility for the suspected leak remains unconfirmed.

Tags