State Bank of India500112Data breach
Suspected customer data exposure on dark web; 3,897 records with personal info identified
Suspected exposure of customer data on the dark web.
By ScoutQuest · · 2 min read
- Records on dark web (approx.)
- 375,000 records
- Customer records with PII identified
- 3,897 customer records
- Alert received date
- 16 October 2026
What was reported
- The Bank says it received communications on 16 October 2026 from its Threat Intelligence Service Provider, the Defence Cyber Agency and CERT-In, regarding an alert on the suspected exposure of its customer data on the dark web.
- During preliminary analysis of approximately 375,000 records available on the dark web, 3,897 customer records containing Personally Identifiable Information (PII) were identified.
What the exposed information reportedly included
- Registered mobile numbers, dates of birth, names, gender, email addresses and residential addresses of customers
- Branch and CIF identifiers, lead IDs, and metadata associated with loan/lead records and other related files
Steps the Bank says it has taken
- Activated its cyber incident response and containment protocols promptly
- Engaged an independent CERT-In-empanelled cybersecurity agency to conduct a comprehensive assessment and investigate the nature and extent of the alleged compromise
- A detailed assessment is currently underway, with appropriate remedial and preventive measures being implemented
What the Bank says about the impact
- The incident does not have any material impact on the Bank's core business operations, financial performance or business continuity
- Core business functions continue to operate normally without disruptions
What is still being established, per the update
- The authenticity and completeness of the exposed data
- The potential source and extent of the exposure, and the associated risks to customers and the Bank
- The Bank says it continues to monitor the situation closely and will take appropriate measures in accordance with applicable regulatory requirements
How to read this
- This is a cyber incident disclosure on customer data. The Bank has quantified the customer records identified so far at 3,897 out of approximately 375,000 records reviewed, and has stated that business and financial performance are not materially affected.
- The data involved is personally identifiable customer information rather than any stated financial or account-balance data.
Also from State Bank of India
Report of a possible dark web data leak affecting State Bank of India customer data, raising privacy and cybersecurity concerns
22 Oct 2026
SBI is on alert after suspected customer data surfaced on the dark web affecting nearly 3,897 customer records
21 Oct 2026
SBI is investigating a cyber attack and data breach that exposed over 3.75 lakh records, including personal data of nearly 4,000 customers, on the dark web
21 Oct 2026
More numbers
- Records available on the dark web (preliminary analysis)375,000 records
- Customer records with Personally Identifiable Information identified3,897 customer records
Source: BSE · 21 Oct 2026
Nothing here is a view, opinion or recommendation of ScoutQuest, its parent, directors or employees. ScoutQuest is a technology company: this page was assembled automatically from public sources using artificial intelligence, and may contain errors or omissions. Confirm everything against the original source before you act on it. Any use of this page is at your own risk, and neither ScoutQuest nor its parent, directors or employees accepts liability for it.