SBI Data Breach: 3,897 Customer Records Exposed on Dark Web
SBI confirms 3,897 customer records with personal details were found on the dark web. What was exposed, what the bank is doing, and how customers can stay safe.
B
Business
NEWS CARD
“SBI Data Breach: 3,897 Customer Records Exposed on Dark Web”
Read more onwww.entrepreneuroutreach.com/s/9c3b0a
21 Oct 2026
Key Highlights
- Breach confirmed: SBI said 3,897 customer records with personal information were found exposed on the dark web.
- Larger dump checked: These were identified during a preliminary review of about 3,75,000 records available online.
- What leaked: Names, mobile numbers, dates of birth, email and home addresses, branch and CIF identifiers, and loan/lead details.
- Probe on: SBI has activated its cyber response protocols and hired an independent CERT-In-empanelled agency to investigate.
- No operational impact: The bank says core operations, finances and services are running normally.
State Bank of India (SBI), the country’s largest lender, has confirmed that personal data of some of its customers has been exposed on the dark web. In an exchange filing on Wednesday, the bank said 3,897 customer records containing Personally Identifiable Information (PII) were identified during a preliminary analysis of around 3,75,000 records found online.
How the Bank Found Out
SBI said it was alerted earlier this week through communications from its Threat Intelligence Service Provider, the Defence Cyber Agency and CERT-In, India’s national cybersecurity agency, about the suspected exposure of customer data.
What Information Was Exposed
According to the bank, the exposed details reportedly include:
