SBI Investigates Suspected Dark Web Exposure Of 3,897 Customer Records Containing Personal Information
Add Preferred News Source
SBI flags suspected dark web exposure of 3,897 customer records and launches an investigation. Core operations remain unaffected. Read more about the incident.
State Bank of India (SBI) has flagged the suspected exposure of 3,897 customer records containing personally identifiable information (PII) on the dark web. The information reportedly includes customers’ names, mobile numbers, dates of birth, email addresses and residential addresses. The country’s largest lender has launched a cyber incident response and appointed an independent cybersecurity agency to investigate the suspected SBI data breach.
In a stock exchange filing, SBI said it received alerts on 16 October from its Threat Intelligence Service Provider, the Defence Cyber Agency and the Indian Computer Emergency Response Team (CERT-In). A preliminary review of around 375,000 records found on the dark web identified 3,897 records containing customer information.
On Wednesday, 21 October, at 10:21 AM, the SBI share price was 0.34% down at ₹970.40.
SBI Launches Investigation Into Suspected Data Exposure
The bank said the exposed records may also contain gender details, branch information, Customer Information File (CIF) identifiers, lead IDs and metadata linked to loan applications and lead records. The suspected SBI dark web data exposure is being investigated to establish the authenticity and completeness of the information.
SBI said a detailed investigation was needed to determine the possible source of the exposure, its extent, and the risks it could pose to customers and the bank.
SBI said it had promptly activated its cyber incident response and containment protocols after receiving the alerts. It has also engaged an independent cybersecurity agency empanelled by CERT-In to conduct a comprehensive assessment.
The investigation is ongoing, and the bank said it would take appropriate remedial and preventive measures based on the findings. The precise origin of the suspected exposure and whether all the identified records are genuine remain to be established.
Has The Incident Affected SBI’s Operations?
SBI said the suspected customer records exposure had no material impact on its core business operations, financial performance or business continuity.
The lender added that its core banking functions continued to operate normally, with no disruption reported. It is monitoring the situation and will take further action in line with applicable regulatory requirements.
SBI is still checking how the customer details surfaced online and whether they have been misused. The exposed information, including phone numbers, birth dates and home addresses, could put affected customers at risk of scam calls, fake messages and phishing attempts.
For now, SBI’s investigation will be key to determining how the information became accessible on the dark web and whether additional safeguards are needed. The bank has not reported any material disruption to its operations, while its assessment of the suspected data exposure continues.
This article is for informational purposes only and should not be considered investment advice from Kotak Neo. For compliance T&C and disclaimers, Visit www.kotakneo.com/disclaimer
Vishwa has spent 10+ years across fintech and FMCG doing what most people miss, connecting the dots, catching trends before they trend, and finding the angle nobody else thought to ask about.
At Kotak Neo, she drives content strategy for neoshorts, Kotak News Desk, and Investing Guide, turning market noise into something worth reading.
When she's not decoding markets, she trades charts for canvases, chasing art, painting, and architecture across cities she's yet to explore.
Right Tools, Rich Insights
