Skip to footer

business

SBI admits customer data exposure on dark web, starts probe

SBI told stock exchanges that 3,897 customer records with personal data were identified in a dark web exposure and said a detailed probe is

Updated 1 min read

Archived — last updated

Key points

  • SBI informed stock exchanges about the incident on October 21, 2026, five days after receiving alerts about suspected data exposure on the
  • A preliminary analysis of about 375,000 dark web records identified 3,897 customer records containing personally identifiable information.
  • SBI said a detailed investigation was required to establish the authenticity and completeness of the exposed data and its source and extent.

Why it matters. The exposure of personally identifiable information could leave affected SBI customers vulnerable to impersonation calls, and the bank's investigation may clarify how far the leak extends.

Updated Sources: The Hindu, News18 Hindi

State Bank of India informed stock exchanges on October 21, 2026, about the suspected exposure of customer data on the dark web, five days after receiving alerts from its Threat Intelligence Service Provider, the Defence Cyber Agency and CERT-In. SBI said a preliminary analysis of approximately 375,000 records on the dark web identified 3,897 customer records containing personally identifiable information.

Latest updates

SBI admits customer data exposure on dark web, starts probe

State Bank of India (SBI) on Wednesday confirmed a suspected exposure of customer data on the dark web and said it has initiated a detailed investigation. The bank cautioned that impacted customers are most likely to receive calls from persons posing as SBI officials who can recite their account details back to them. SBI said it was alerted to the suspected exposure through external sources and is working to establish the authenticity and completeness of the data. The bank maintained that its core systems and customer balances remain safe. Cybersecurity experts have warned that leaked personal information could fuel targeted fraud and social engineering attacks. SBI has advised customers to remain vigilant against unsolicited calls or messages requesting sensitive information.

Sources

Topics