The State Bank of India (SBI) has confirmed a significant data security incident. Personal information belonging to thousands of customers was discovered on the dark web, prompting an urgent investigation and raising serious questions about data safety.
What We Know So Far
State Bank of India, the country's largest lender, acknowledged a data exposure after being alerted by multiple cybersecurity agencies, including the Indian Computer Emergency Response Team (CERT-In). On October 16, 2026, these agencies notified the bank about customer data appearing on the dark web. A preliminary analysis of about 375,000 records found online revealed that 3,897 of them contained personally identifiable information (PII) of SBI customers. In a regulatory filing, the bank confirmed the incident and announced it had launched a full-scale investigation, engaging an independent cybersecurity agency to determine the source and scope of the leak. SBI has stated that the incident has not affected its core banking systems or financial operations.
What Personal Data Was Exposed?
The exposed dataset contains sensitive personal details that could be used for fraud and identity theft. According to SBI's disclosure, the compromised information includes customer names, dates of birth, registered mobile numbers, email addresses, and residential addresses. Additionally, internal banking identifiers such as branch codes, Customer Information File (CIF) numbers, and metadata related to loan applications were also part of the leak. While financial details like full account numbers and passwords were not part of this specific exposure, security experts warn that the leaked information is still highly valuable to criminals for orchestrating sophisticated phishing and impersonation attacks.
How Is the Bank Responding?
SBI has activated its cyber incident response protocols to contain the situation. The bank's chairman, C.S. Setty, stated that a root cause analysis is underway and that the immediate focus has been on containment and remediation. Following some initial criticism, SBI confirmed on October 23 that it had started individually notifying all 3,897 affected customers via email and WhatsApp. The bank has reassured customers that their account balances and funds remain safe. Furthermore, SBI has initiated a comprehensive cybersecurity drill, including vulnerability assessments, to strengthen its defences against future attacks. The investigation to establish the authenticity of the data and its potential source is ongoing.
Steps to Protect Your Account
Even if you are not among the customers directly notified, this incident serves as a critical reminder to enhance your digital security. First, be extremely cautious of unsolicited communications. Scammers may use the leaked data to send convincing phishing emails or text messages that appear to be from SBI. Never click on suspicious links or share your password, PIN, or OTP with anyone. It is also wise to change your online banking password to something strong and unique. Enable two-factor authentication (2FA) wherever possible, as it provides a crucial second layer of security. Regularly monitor your bank statements and credit reports for any unusual activity. If you spot any unauthorised transactions, report them to the bank immediately.
