New Delhi, October 21, 2026 (Yes Punjab News)
State Bank of India (SBI), the country’s largest lender, on Wednesday confirmed that 3,897 customer records containing personally identifiable information (PII) were found exposed on the dark web.
In a regulatory filing, the bank said it had received communications earlier in the week from its Threat Intelligence Service Provider, the Defence Cyber Agency and the Indian Computer Emergency Response Team (CERT-In) regarding an alert about the suspected exposure of customer data.
During a preliminary analysis of approximately 375,000 records available on the dark web, 3,897 customer records containing personally identifiable information were identified, SBI said.
The exposed information reportedly included customers’ registered mobile numbers, dates of birth, names, gender, email addresses, residential addresses, branch and Customer Information File (CIF) identifiers, lead IDs, metadata associated with loan and lead records, and other related files.
SBI said it promptly activated its cyber incident response and containment protocols. It also engaged an independent cybersecurity agency empanelled by CERT-In to conduct a comprehensive assessment and investigate the nature and extent of the suspected compromise.
A detailed investigation is underway to verify the authenticity and completeness of the exposed data, determine the possible source and extent of the exposure, and assess the associated risks, the bank said.
The lender added that the incident had no material impact on its core business operations, financial performance or business continuity. Its core functions continue to operate normally without disruption, and appropriate remedial and preventive measures are being implemented.
SBI shares traded largely flat at around Rs 970 on the BSE at approximately 10 a.m. on Wednesday. According to exchange data, the stock recorded a 52-week high of Rs 1,234.80 and a low of Rs 891.55. It declined around 12 per cent over the past year but recorded gains over a five-year period.
Earlier in the week, an unidentified hacker group operating under the name ‘Siriusim’ claimed to have obtained confidential customer information allegedly linked to SBI, including personal details, loan applications and account-opening documents.
The claim was highlighted by the cybersecurity monitoring account CyberPulse56 in a post on the social media platform X.
According to the post, the group purportedly possessed around 375,000 data entries in CSV format and 2,722 PDF documents associated with the public sector lender.
SBI’s investigation is continuing to establish the extent of the exposure and assess the potential risks to affected customers.
FOLLOW NOW
