State Bank of India (SBI) recently issued a statement to reassure its millions of customers. Following a notable cyber incident, the bank confirmed that its most critical functions remain secure and that day-to-day banking is operating as usual.
Breaking Down the Incident
In mid-October
2026, SBI received alerts from multiple cybersecurity bodies, including the Indian Computer Emergency Response Team (CERT-In), about a potential data leak. An investigation followed after claims that customer data had appeared on the dark web. According to SBI's preliminary assessment, a set of records containing Personally Identifiable Information (PII) of 3,897 customers was identified. This exposed information reportedly included details like names, mobile numbers, email addresses, and residential addresses. However, the bank has been firm that the incident had no material impact on its financial performance or business continuity.
What 'Core Banking Operations' Means for You
When SBI states its 'core banking operations' are unaffected, it's a crucial distinction. The core banking system, or CBS, is the central nervous system of a bank. It's the back-end platform that handles all essential transactions: processing deposits and withdrawals, maintaining account balances, calculating interest, and managing loans. This system allows you to access your account and perform transactions from any branch, ATM, or digital channel, ensuring that your money is tracked accurately and securely in real-time. By confirming the CBS was not compromised, SBI is assuring customers that the fundamental integrity of their accounts and funds remains intact.
Are Banking Services Actually Normal?
For the average customer, the bank's message is that key services continue without disruption. This includes transactions at ATMs, online banking via the website, and mobile banking through the YONO app. Branch operations, cheque clearances, and other routine activities are also reported to be functioning normally. The 'incident' related to a data leak of customer information, not an attack on the transactional systems themselves. While the exposure of personal data is a serious concern that is being investigated, it did not shut down or compromise the machinery that powers daily banking services for millions.
How SBI Responded to the Threat
Upon receiving the alerts, SBI activated its cyber incident response and containment protocols. The bank appointed an independent, CERT-In empanelled cybersecurity agency to conduct a thorough assessment of the nature and extent of the data exposure. The primary goal of this investigation is to establish the authenticity of the leaked data, identify its source, and assess the full risk to customers. While the investigation continues, SBI has stated that it has individually notified all customers whose data was identified in the preliminary analysis via email or WhatsApp, reassuring them that their account balances are safe.
What You Should Do to Stay Safe
Even though SBI has confirmed that financial systems are secure, vigilance is key. Cybercriminals can use leaked personal information like names, emails, and phone numbers for sophisticated phishing attacks. Be wary of unsolicited calls, text messages, or emails claiming to be from SBI. Never click on suspicious links or share sensitive information like your PIN, password, or OTP with anyone. For any concerns or clarifications, always rely on the bank's official communication channels, such as its official website, customer care helpline, or by visiting your nearest branch. This incident serves as a reminder for all banking customers to practice safe digital habits to protect themselves from potential fraud.
