business
SBI admits customer data exposure on dark web, starts probe
SBI told stock exchanges that 3,897 customer records with personal data were identified in a dark web exposure and said a detailed probe is
Archived — last updated
Key points
- SBI informed stock exchanges about the incident on October 21, 2026, five days after receiving alerts about suspected data exposure on the
- A preliminary analysis of about 375,000 dark web records identified 3,897 customer records containing personally identifiable information.
- SBI said a detailed investigation was required to establish the authenticity and completeness of the exposed data and its source and extent.
Why it matters. The exposure of personally identifiable information could leave affected SBI customers vulnerable to impersonation calls, and the bank's investigation may clarify how far the leak extends.
State Bank of India informed stock exchanges on October 21, 2026, about the suspected exposure of customer data on the dark web, five days after receiving alerts from its Threat Intelligence Service Provider, the Defence Cyber Agency and CERT-In. SBI said a preliminary analysis of approximately 375,000 records on the dark web identified 3,897 customer records containing personally identifiable information.
Latest updates
SBI admits customer data exposure on dark web, starts probe
State Bank of India (SBI) on Wednesday confirmed a suspected exposure of customer data on the dark web and said it has initiated a detailed investigation. The bank cautioned that impacted customers are most likely to receive calls from persons posing as SBI officials who can recite their account details back to them. SBI said it was alerted to the suspected exposure through external sources and is working to establish the authenticity and completeness of the data. The bank maintained that its core systems and customer balances remain safe. Cybersecurity experts have warned that leaked personal information could fuel targeted fraud and social engineering attacks. SBI has advised customers to remain vigilant against unsolicited calls or messages requesting sensitive information.
Sources
AI-assisted summary of the reporting above. Quotes are kept to one sentence. Copyright concern? See our DMCA takedown page.