- Published on
State Bank of India Confirms Data Leak After 3,897 Customer Records Found on Dark Web
- Authors
- Name
- DeepHorus
State Bank of India confirmed an incident after 3,897 customer records with personal information were identified within a set of about 375,000 records on the dark web. In a stock-exchange filing dated October 21, the state-owned bank said it “has experienced an incident involving the loss of certain data.” It said it does not yet know where the data came from.
India’s largest bank called the count preliminary and said it has not established whether the data is authentic, how far the exposure goes, or what risk it poses. The records reportedly include registered mobile numbers, dates of birth, names, gender, email and residential addresses, branch and CIF identifiers, lead IDs, and loan-related metadata. It said account numbers, balances, passwords, one-time passcodes, card details, and PAN or Aadhaar numbers were not listed.
The main risk is impersonation, in which a caller or message uses a customer’s name, mobile number, date of birth, address, branch, and internal ID to appear to come from the bank. The alert reached SBI on October 16 through CERT-In and the Defense Cyber Agency. SBI activated containment procedures and engaged an independent cybersecurity firm from CERT-In’s approved panel.
The filing said the incident has no material impact on core operations, financial performance, or business continuity. It names no attacker, forum, or dataset. The 375,000 figure matches an October 16 claim by CyberPulse56, which said actor Siriusim claimed 375,000 CSV rows and 2,722 PDFs linked to SBI.
Whether any SBI system was breached remains an open question. The filing leaves the source to the investigation and gives no date for when the data appeared. It does not say whether affected customers will be notified.
The incident underscores impersonation risks and scrutiny of third-party data handling. SBI directs customers to report cyber incidents to report.phishing@sbi.co.in or helpline 1930. Investigation continues.
