New Delhi, October 23, 2026 (Yes Punjab News)
The State Bank of India (SBI), the country’s largest lender, on Friday assured customers that their account balances and funds remained safe following a recent cyber incident in which 3,897 customer records were reportedly found exposed on the dark web.
In a statement shared on social media platform X, the bank said it had individually informed customers whose data was identified in the incident through email and/or WhatsApp.
“Further to our earlier post regarding the recent cyber incident, the lender has individually informed all customers whose data was identified as being involved through email and/or WhatsApp. We reiterate that your account balances and funds are safe with us,” the bank said.
SBI advised customers to follow safe digital banking practices, never share their one-time passwords (OTPs), personal identification numbers (PINs) or passwords with anyone, and remain alert to suspicious calls, messages and emails.
The latest statement follows the bank’s earlier confirmation that customer records had been identified among data available on the dark web.
Earlier this week, SBI said it had received communications from its Threat Intelligence Service Provider, the Defence Cyber Agency and the Indian Computer Emergency Response Team (CERT-In) regarding an alert about the suspected exposure of customer data.
During a preliminary analysis of approximately 3,75,000 records available on the dark web, the bank identified 3,897 customer records containing personally identifiable information (PII), according to an exchange filing.
The potentially exposed information included registered mobile numbers, dates of birth, names, gender, email addresses, residential addresses, branch and Customer Information File (CIF) identifiers, lead IDs, metadata associated with loan or lead records, and other related files.
SBI said it had promptly activated its cyber incident response and containment protocols and engaged an independent cybersecurity agency empanelled with CERT-In to conduct a comprehensive assessment and investigate the nature and extent of the suspected compromise.
A detailed investigation is underway to establish the authenticity and completeness of the exposed data, determine the potential source and extent of the exposure, and assess the associated risks, the bank said.
The lender’s latest assurance seeks to reassure customers about the safety of their funds while the investigation into the data exposure continues.















































































