SBI Data Leak: 3,897 Customer Records Found on Dark Web; Should Customers Be Worried?

The State Bank of India (SBI) has reported a suspected customer data leak after a preliminary investigation identified 3,897 records containing personal information among approximately 3.75 lakh records found on the dark web. The bank disclosed the incident to stock exchanges on October 21, 2026, and has initiated a detailed cybersecurity investigation.

The incident has raised concerns about customer privacy and the possibility of online fraud. However, the exposure of personal information does not automatically mean that customers` bank accounts have been compromised or money has been stolen.

SBI Data Leak: What Happened?

According to reports on SBI`s disclosure, the bank received alerts on October 16 from its threat intelligence service provider, the Defence Cyber Agency and the Indian Computer Emergency Response Team (CERT-In) regarding customer information allegedly available on the dark web.

A preliminary examination of approximately 375,000 records identified 3,897 records containing personally identifiable information. SBI has launched a detailed investigation to establish the authenticity of the data, determine its source and assess the extent of the exposure.

What Customer Information May Have Been Exposed?

The potentially exposed information includes:

- Customers` names and registered mobile numbers

- Dates of birth and gender

- Email addresses and residential addresses

- Customer Information File (CIF) identifiers

- Branch-related information and lead IDs

- Metadata associated with loan and lead records

The investigation is ongoing, and the complete scope and origin of the data exposure have not yet been established.

Will the SBI Data Leak Affect Customers` Bank Accounts?

SBI has stated that the incident has had no material impact on its core business operations, financial performance or business continuity. Banking services continue to operate normally.

However, exposed personal information could increase the risk of phishing messages, fraudulent calls and impersonation attempts. Scammers may use genuine customer details to make fake calls or messages appear authentic.

Customers should therefore remain vigilant even if they have not noticed any suspicious account activity.

SBI Initiates Cybersecurity Investigation

SBI has activated its cyber incident response and containment procedures and appointed an independent cybersecurity agency empanelled by CERT-In to investigate the incident.

The investigation aims to verify the exposed information, identify the possible source of the leak and determine the necessary corrective and preventive measures.

Safety Tips for SBI Customers

Customers can take the following precautions:

- Never share an OTP, ATM PIN, internet banking password or UPI PIN with anyone.

- Do not click suspicious links received through SMS, email or messaging applications.

- Never install remote-access applications at the request of an unknown caller claiming to represent a bank.

- Monitor bank statements and transaction alerts for unfamiliar activity.

- Contact SBI through its official customer care channels if a suspicious transaction or communication is detected.

SBI`s official customer care numbers include 1800 1234 and 1800 2100. The bank also advises customers not to disclose confidential banking information to callers or through unsolicited messages.

Conclusion

The reported SBI data leak highlights the importance of protecting customer information and remaining alert to digital banking fraud. Although the bank says its core operations remain unaffected, customers should take precautions against phishing and impersonation attempts while the investigation continues.