CYBERSECURITY • CONSUMER SAFETY • 6 min read
Quick Answer: State Bank of India disclosed a dark web data leak after alerts from CERT-In and the Defence Cyber Agency. While threat actors claimed 3.75 lakh records, SBI verified that 3,897 customer records contained personal details including names, phone numbers, branch codes, and loan lead data. Core funds, passwords, and OTPs were not compromised.
Last updated: 23 October 2026.
State Bank of India, the country's largest public-sector lender, has formally acknowledged a cybersecurity incident involving customer data offered on cybercrime forums. The disclosure arrived through regulatory filings submitted to the Bombay Stock Exchange (BSE) and National Stock Exchange (NSE) following coordinated alerts from national cyber defense authorities.
With hundreds of millions of active savings accounts across the country, news of banking data circulating on the dark web understandably raises anxiety. However, the nature of the compromised information requires a clear-headed assessment: your bank balance is not open to direct automated theft, but accountholders face an immediate surge in sophisticated, personalized phishing calls and fraudulent loan recovery schemes.