India’s largest lender, the State Bank of India, is looking into a suspected data compromise that may involve customer information. While the investigation is ongoing, the bank has assured customers that core banking operations are unaffected.
What We Know So Far
State Bank
of India confirmed it is investigating a potential data security incident. On October 16, 2026, the bank received alerts from its own threat intelligence provider, the Defence Cyber Agency, and the Indian Computer Emergency Response Team (CERT-In) about customer data possibly being exposed on the dark web. A preliminary review of about 375,000 records found that 3,897 contained personally identifiable information of customers. The exposed information reportedly includes names, mobile numbers, dates of birth, email and residential addresses, and some loan-related metadata. The bank has not yet confirmed the source of the leak, and a full forensic investigation is underway.
Is My Money Safe? Bank Operations Continue
SBI has been clear and consistent in its public statements: the incident has not had a material impact on its core banking systems or business continuity. The bank has repeatedly assured customers that their account balances and funds are safe. All banking services, including branch operations, net banking, and ATMs, are functioning normally. The primary concern stemming from this incident is not the direct loss of funds from accounts, but the potential for fraudsters to use the leaked personal information for other malicious activities. SBI has stated it has individually informed the customers who were identified in the initial analysis of the data.
What the Bank is Doing Now
Immediately upon receiving the alerts, SBI activated its cyber incident response and containment protocols. The bank has appointed an independent cybersecurity agency, which is empanelled with CERT-In, to conduct a comprehensive investigation. According to SBI Chairman C.S. Setty, the bank's immediate focus has been on containing the breach, identifying the vulnerabilities that led to it, and implementing corrective measures. The root cause analysis is expected to take some time. The bank is also working with the Indian Banks' Association (IBA) to explore better systems for sharing cyber threat information across the entire banking sector to prevent future incidents.
How Customers Should Protect Themselves
While the bank investigates, customers are advised to be extra vigilant. The main risk is an increase in sophisticated phishing and 'smishing' scams, where fraudsters use accurate personal details to make their fraudulent calls, SMS messages, or emails seem more legitimate. Customers should treat any unsolicited communication asking for personal or financial details with extreme caution. Remember, SBI has stated it never asks for sensitive information like your PIN, OTP, or password via email, SMS, or phone calls. It is crucial to never click on suspicious links or enter your UPI PIN to 'receive' money, as a PIN is only ever used for authorising payments from your account. Checking your account statements and credit reports regularly for any unfamiliar activity is also a prudent step.
Best Practices for Secure Banking
This incident is a reminder to always follow digital safety best practices. Always access your banking website by typing the URL directly into your browser, not by clicking a link in an email. Use strong, unique passwords for your internet banking and change them periodically. Ensure the operating system and security software on your phone and computer are always up to date. Be wary of accessing your banking information from public Wi_Fi or shared computers like those in cyber cafes. SBI recommends customers verify messages by checking for official shortcodes like 'SBIBNK' or 'SBYONO'. If you notice any unauthorised transaction or suspect your details have been compromised, you should report it to the bank immediately through official channels and also to the national financial cyber fraud hotline at 1930.
