Data breach: SBI admits exposure of its customer data on the Dark Web
“Impacted customers are the most likely to receive calls from persons posing as SBI officials who can recite their account details back to them” the Internet Freedom Foundation said asking SBI to alert the said customers
Account subscription benefits alongside Premium Stories, Editorials, Opinions and more.
Unlock these with Subscription
The View From India Looking at World Affairs from the Indian perspective.
First Day First Show News and reviews from the world of cinema and streaming.
Today's Cache Your download of the top 5 technology stories of the day.
Science For All The weekly newsletter from science writers takes the jargon out of science and puts the fun in!
Data Point Decoding the headlines with facts, figures, and numbers
THEdge At the cutting edge of education and careers
Health Matters Ramya Kannan writes to you on getting to good health, and staying there
Gender Agenda Stories from beyond the binary.
The Hindu On Books Books of the week, reviews, excerpts, new titles and features.
Updated - October 21, 2026 12:37 pm IST - New Delhi
SBI said a detailed investigation was required to establish the authenticity and completeness of the exposed data, determine the potential source and extent of the exposure | Photo Credit: Reuters
State Bank of India is investigating the suspected exposure of 3,897 customer records containing personally identifiable information on the dark web, following alerts received from its threat intelligence service provider, the Defence Cyber Agency and CERT-In on October 16.
A preliminary analysis of around 3.75 lakh records available on the dark web identified 3,897 customer records containing sensitive information, including registered mobile numbers, dates of birth, names, gender, email addresses and residential addresses, SBI said in the regulatory filing on Wednesday (October 21, 2026).
The exposed information reportedly also included branch and Customer Information File (CIF) identifiers, lead IDs, and metadata associated with loan and lead records and other related files.
It said a detailed investigation was required to establish the authenticity and completeness of the exposed data, determine the potential source and extent of the exposure, and assess the associated risks to customers and the bank.
SBI said it had promptly activated its cyber incident response and containment protocols.
It had also engaged an independent cybersecurity agency empanelled by CERT-In to conduct a comprehensive assessment and investigate the alleged compromise.
The incident has had no material impact on the bank's core business operations, financial performance or business continuity, the filing said, adding that its core business functions continued to operate normally without disruption.
A detailed assessment is underway, and appropriate remedial and preventive measures are being implemented, it said.
SBI added that it was closely monitoring the situation and taking all appropriate measures in accordance with applicable regulatory requirements.
Terms & conditions | Institutional Subscriber
Comments have to be in English, and in full sentences.
They cannot be abusive or personal.
Please abide by our community guidelines for posting your comments.
We have migrated to a new commenting platform.
If you are already a registered user of The Hindu and logged in, you may continue to engage with our articles.
If you do not have an account please register and login to post comments.
Users can access their older comments by logging into their accounts on Vuukle.
Full detailed coverage is shown on the council website above. Source attribution: The Hindu – Business.
Back to all council news
