[REVISION HISTORY]

State Bank of India data breach

Updated 4 times since CLSTR started tracking revisions of this situation.

What changed

2026-10-23 06:48 UTC → 2026-10-23 13:27 UTC · added ~~removed~~

The State Bank of India (SBI) confirmed a cyber incident involving the suspected exposure of 3,897 customer records on the dark web. This specific subset was identified within a larger dataset of approximately 375,000 records discovered online. The breach was disclosed following alerts received on October 16 from the Defence Cyber Agency and the Indian Computer Emergency Response Team (CERT-In). The exposed personally identifiable information (PII) includes names, mobile numbers, dates of birth, gender, email addresses, and residential addresses, as well as branch details, Customer Information File (CIF) identifiers, lead IDs, and metadata related to loan applications. SBI stated that the incident has no material impact on its core business operations, financial performance, or business continuity, and assured customers that account balances remain safe. The bank has initiated cyber incident response and containment procedures and has engaged an independent cybersecurity agency empanelled by CERT-In to conduct a comprehensive investigation. Political fallout has intensified following the disclosure. While the Congress party previously criticized the government’s handling of the initial October 16 alert, A.A. Rahim, a Rajya Sabha member from the CPI(M), has called on Union Finance Minister Nirmala Sitharaman to order an independent investigation. Rahim expressed concern that the exposure could lead to “identity theft, targeted phishing, and financial fraud,” specifically impacting vulnerable groups such as pensioners, laborers, and small traders. He urged the Ministry of Finance to determine the source and scope of the leak and to strengthen cybersecurity measures across all public sector banks. Additionally, the Internet Freedom Foundation has called on the bank to notify all affected customers regarding the specific information exposed. Following the initial disclosure, SBI has begun individually notifying affected customers via email and WhatsApp.

Versions

Only revisions since CLSTR began indexing content versions appear here. Select a version to see what changed compared to the one before it.