business
SBI informs 3,897 customers of dark web data leak, says funds are safe
SBI informed affected customers via email and WhatsApp following a data breach involving customer records on the dark web.
Key points
- SBI identified 3,897 customer records with personally identifiable information among 375,000 records on the dark web.
- Exposed data included names, residential addresses, mobile numbers, dates of birth, and loan-related metadata.
- The bank was alerted to the suspected exposure on October 16, 2026, by CERT-In and the Defence Cyber Agency.
Why it matters. The breach exposes sensitive personal data of customers, though SBI claims funds are safe and advises vigilance against suspicious communications.
State Bank of India notified 3,897 customers via email and WhatsApp after their data appeared on the dark web. The bank identified these records from 375,000 files examined following alerts on October 16 from CERT-In, the Defence Cyber Agency, and its Threat Intelligence Service Provider. Leaked information included names, dates of birth, residential addresses, and CIF numbers, though SBI asserts account balances remain safe.
Latest updates
SBI informs 3,897 customers of dark web data leak, says funds are safe
The State Bank of India bank said it had individually notified the affected customers through email and/or WhatsApp. The State Bank of India (SBI) has informed 3,897 customers whose data was leaked on the dark web that their account balances and funds remain safe.Two days after disclosing the suspected data exposure, the bank said it had individually notified the affected customers through email and WhatsApp mediums."Further to our earlier post regarding the recent cyber incident, the Bank has individually informed all customers, whose data was identified as being involved, through email and/or WhatsApp. We reiterate that your account balances and funds are safe with us. Customers are advised to follow safe digital banking practices, never share their OTP, PIN or password with anyone, and remain vigilant against suspicious calls, messages and emails." the bank said in a statementAlso Read | SBI confirms data leak involving 3,897 customer records in preliminary analysisSBI, on October 21, said a preliminary analysis identified 3,897 customer records containing personally identifiable information in data suspected to have been exposed on the dark web. The bank had initiated a detailed investigation into the incident.The exposed data reportedly included customer details such as names, dates of birth, gender, registered mobile numbers, email IDs and residential addresses.SBI said i.
SBI Informs Affected Customers Following Data Breach
State Bank of India has clarified that it individually informed all customers impacted by a recent data breach. The bank had previously faced criticism for notifying stock exchanges about the incident while failing to alert the affected users. The breach raised concerns regarding the security of customer data. SBI maintains that all necessary communications have now been completed.
SBI reports data of 3,897 customers found on dark web after cyberattack
State Bank of India (SBI) disclosed on Wednesday that personal data of 3,897 customers was found on the dark web following a cyberattack. The bank informed stock exchanges that it received alerts on October 16 from its threat intelligence service provider, the Defence Cyber Agency, and the Indian Computer Emergency Response Team (CERT-In). A preliminary analysis found approximately 375,000 records were accessed, though SBI said core banking operations remain unaffected. The bank described the incident as one involving data loss and is investigating the breach. SBI is India's largest bank by assets and customer base.
SBI reports cyberattack exposing 3,897 customer records on dark web
State Bank of India on Wednesday reported a cyberattack that resulted in the disclosure of 3,897 customer records containing personally identifiable information on the dark web. A preliminary analysis showed the exposed information included customer names, mobile numbers, dates of birth, email addresses, residential addresses, brand and customer identifiers, along with loan records. The bank said the analysis was conducted on 375,000 records available on the dark web, from which the SBI customer records were identified. SBI has not disclosed when the breach occurred or how the data was compromised. The bank said it is investigating the incident and has not reported any financial loss to customers so far.