SBI says 3,897 customer records appeared on the dark web
Original title: SBI Confirms Data Breach – 3000+ Customer Records Exposed on Dark Web
Investigators confirmed 3,897 PII records after reviewing about 375,000 rows; passwords, PINs, and stolen funds were not reported.
State Bank of India told exchanges on October 21, 2026, that a review found 3,897 customer records with personal data on the dark web. Alerts arrived on October 16 from its threat-intelligence provider, the Defense Cyber Agency, and CERT-In. SBI says services were unaffected and has not identified a source, entry point, or attacker. A CERT-In-approved firm is still checking authenticity and scale.
Unconfirmed: SBI says authenticity, completeness, and source are still unestablished, and it names no attacker.
- Alerts arrived on October 16 from threat intelligence, the Defense Cyber Agency, and CERT-In.
- Fields included names, contacts, addresses, branch identifiers, and loan-related metadata.
- The filing does not list passwords, PINs, one-time passwords, or stolen funds.
- Earlier Siriusim claims of 375,000 rows are not attributed by SBI.
Impact: Customer PII and loan-related metadata exposed on the dark web
- 1.Verify unexpected bank messages through official channels
- 2.Never share PINs or one-time passwords
- 3.Check statements for unauthorized transactions
- Victims
- State Bank of India
- Organizations
- CERT-InDefense Cyber Agency
- Countries
- India
From the original article
3 min read at cybersecuritynews.com
State Bank of India (SBI) has disclosed a data loss incident after a preliminary review identified 3,897 customer records containing personal information on the dark web. The bank reported the findings in an October 21, 2026, stock exchange filing, while saying investigators still needed to establish the data’s authenticity, completeness, and source. The disclosure confirms […]
By Guru Baran · cybersecuritynews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.