{"id":2827,"date":"2026-10-21T08:32:23","date_gmt":"2026-10-21T08:32:23","guid":{"rendered":"https:\/\/newsraise.com\/in\/2026\/10\/21\/state-bank-of-india-flagged-customer-records-dark-web\/"},"modified":"2026-10-21T08:32:23","modified_gmt":"2026-10-21T08:32:23","slug":"state-bank-of-india-flagged-customer-records-dark-web","status":"publish","type":"post","link":"https:\/\/newsraise.com\/in\/2026\/10\/21\/state-bank-of-india-flagged-customer-records-dark-web\/","title":{"rendered":"State Bank of India flags 3,897 customer records on dark web"},"content":{"rendered":"\n<!-- Quick Adsense WordPress Plugin: http:\/\/quickadsense.com\/ -->\n<div class=\"9fece8afa224fd09e54b043d0febfb58\" data-index=\"1\" style=\"float: none; margin:10px 0 10px 0; text-align:center;\">\n<script async src=\"https:\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js\"><\/script>\r\n<!-- NR ATF -->\r\n<ins class=\"adsbygoogle\"\r\n     style=\"display:block\"\r\n     data-ad-client=\"ca-pub-8898941184964366\"\r\n     data-ad-slot=\"4839033563\"\r\n     data-ad-format=\"auto\"\r\n     data-full-width-responsive=\"true\"><\/ins>\r\n<script>\r\n     (adsbygoogle = window.adsbygoogle || []).push({});\r\n<\/script>\n<\/div>\n<p>New Delhi \u2013 The State Bank of India (SBI), the country\u2019s largest lender, announced on Wednesday that a preliminary analysis of data circulating on the dark web identified 3,897 customer records containing personally identifiable information (PII). The bank said it has activated a detailed investigation to verify the authenticity, source and scope of the alleged exposure.<\/p>\n<h2>Scope of the alleged exposure<\/h2>\n<p>According to SBI\u2019s exchange filing, the bank received alerts about a possible data leak on October 16 from its Threat Intelligence Service Provider, the Defence Cyber Agency and the Indian Computer Emergency Response Team (CERT\u2011In). A subsequent review of roughly 375,000 records found on the dark web highlighted 3,897 entries that included customers\u2019 registered mobile numbers, dates of birth, names, gender, email addresses, residential addresses, branch identifiers, Customer Information File (CIF) numbers, lead IDs and metadata linked to loan and lead records.<\/p>\n<p>Separately, an unnamed hacker collective calling itself \u201cSiriusim\u201d claimed responsibility for the breach. A cybersecurity monitoring account, CyberPulse56, posted on the social platform X that the group possessed around 3.8\u202flakh (380,000) data entries in CSV format and 2,722 PDF documents allegedly tied to SBI. The purported files were said to contain personal details, loan applications, account\u2011opening documents and supporting paperwork. The bank noted that the authenticity and origin of these claims remain unverified.<\/p>\n<h2>Bank\u2019s response and investigation<\/h2>\n<p>SBI said it immediately triggered its cyber\u2011incident response and containment protocols. The lender also engaged an independent cybersecurity agency, empanelled by CERT\u2011In, to assess the alleged compromise and evaluate any potential risk to customers and the bank\u2019s operations.<\/p>\n<p>In its statement, SBI emphasized that the incident has not had any material impact on its core business operations, financial performance or business continuity. \u201cThe Bank\u2019s core business functions continue to operate normally without disruptions,\u201d the filing read. \u201cA detailed assessment is currently underway and appropriate remedial and preventive measures are being implemented as required.\u201d<\/p>\n<p>The ongoing investigation will focus on confirming whether the data is authentic and complete, pinpointing the source of the exposure, and measuring the risks associated with the incident. SBI indicated that it will continue to monitor the situation and act in line with applicable regulatory requirements.<\/p>\n<h2>Broader cybersecurity context<\/h2>\n<p>The revelation arrives amid heightened scrutiny of cyber threats facing India\u2019s financial sector. Earlier in the year, the Reserve Bank of India (RBI) tightened cybersecurity mandates for commercial banks, urging stronger safeguards, incident\u2011response frameworks and regular vulnerability assessments.<\/p>\n<p>Industry observers have warned that the rapid digitisation of banking services, accelerated by the pandemic, has expanded the attack surface for cybercriminals. While SBI has not disclosed any evidence that the data was used fraudulently, the bank\u2019s swift response underscores the sector\u2019s growing emphasis on resilience and transparency.<\/p>\n<p>Regulators and cybersecurity agencies have repeatedly highlighted the importance of information sharing between banks, government bodies and private threat\u2011intelligence firms. In SBI\u2019s case, the initial alert came from a coordinated effort involving its own threat\u2011intelligence partner, the Defence Cyber Agency and CERT\u2011In, illustrating the multi\u2011stakeholder approach promoted by the RBI\u2019s recent guidelines.<\/p>\n<p>Customers potentially affected by the leak have not been individually notified, as the bank is still assessing the completeness of the dataset. However, SBI\u2019s public communication reiterates that no disruption to services such as deposits, withdrawals or loan processing has been observed.<\/p>\n<p>Analysts note that even when a breach does not immediately affect operations, the exposure of personal data can increase the risk of phishing, identity theft and targeted fraud. They recommend that customers remain vigilant, monitor account activity and consider updating passwords or authentication methods where applicable.<\/p>\n<p>As the investigation proceeds, SBI said it will keep stakeholders informed of any material developments. The bank\u2019s statement also reaffirmed its commitment to complying with all regulatory mandates and to implementing any additional safeguards deemed necessary by the independent cybersecurity assessment.<\/p>\n<p>While the full ramifications of the alleged data leak remain to be determined, the episode highlights the persistent challenge of protecting sensitive financial information in an increasingly interconnected digital environment.<\/p>\n\n<div style=\"font-size: 0px; height: 0px; line-height: 0px; margin: 0; padding: 0; clear: both;\"><\/div>","protected":false},"excerpt":{"rendered":"<p>SBI says a preliminary scan of dark\u2011web data revealed 3,897 of its customers&#8217; personal records, prompting a full investigation but no impact on core banking operations.<\/p>\n","protected":false},"author":4,"featured_media":2828,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[299],"tags":[1411,3137,3136,3138,22],"class_list":["post-2827","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news","tag-cybersecurity","tag-dark-web","tag-data-breach","tag-financial-sector","tag-state-bank-of-india","entry"],"_links":{"self":[{"href":"https:\/\/newsraise.com\/in\/wp-json\/wp\/v2\/posts\/2827","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/newsraise.com\/in\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/newsraise.com\/in\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/newsraise.com\/in\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/newsraise.com\/in\/wp-json\/wp\/v2\/comments?post=2827"}],"version-history":[{"count":0,"href":"https:\/\/newsraise.com\/in\/wp-json\/wp\/v2\/posts\/2827\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/newsraise.com\/in\/wp-json\/wp\/v2\/media\/2828"}],"wp:attachment":[{"href":"https:\/\/newsraise.com\/in\/wp-json\/wp\/v2\/media?parent=2827"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/newsraise.com\/in\/wp-json\/wp\/v2\/categories?post=2827"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/newsraise.com\/in\/wp-json\/wp\/v2\/tags?post=2827"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}