< Back to all clusters
[BUSINESS] · India · 32 sources

started · updated

State Bank of India confirms exposure of 3,897 customer records on dark web

The State Bank of India (SBI) has confirmed a data breach after discovering that 3,897 customer records containing personally identifiable information (PII) were exposed on the dark web. The bank initiated its cyber incident response protocols following alerts received on October 16, 2026, from its threat intelligence provider, the Defence Cyber Agency, and the Indian Computer Emergency Response Team (CERT-In).

A preliminary analysis of approximately 375,000 records found on the dark web identified the compromised data. The exposed information includes customer names, registered mobile numbers, dates of birth, gender, email addresses, and residential addresses. Additionally, the breach involves banking identifiers such as branch details, Customer Information File (CIF) identifiers, lead IDs, and metadata associated with loan applications and other digital documents.

SBI has engaged an independent cybersecurity agency empanelled by CERT-In to conduct a comprehensive investigation into the nature and extent of the compromise. The bank stated that the incident has no material impact on its core business operations, financial performance, or business continuity, and assured customers that account balances remain safe. The Internet Freedom Foundation has called on the bank to notify all affected customers regarding the specific information exposed.

Entities

CERT-In · CyberPulse56 · Defence Cyber Agency · India · Internet Freedom Foundation · Siriusim · State Bank of India

Claims

What the coverage asserts, and how many sources carry each claim.

Sources