New Delhi. A major case related to the security of personal information of customers of the country's largest commercial lender 'State Bank of India' (SBI) has come to light. The bank has officially confirmed that a preliminary analysis of approximately 3,75,000 records found on the dark web has exposed personally identifiable information (PII) of 3,897 of its customers. Immediately after receiving the alert from national cybersecurity agencies on October 16, the bank activated its Cyber Incident Response Protocol and initiated a detailed investigation into the matter.
Read :- UP MLC Election: Rebellion in BJP, rebellion of MLC Devendra Pratap Singh, said – Officers are threatening teachers, this cannot be tolerated…
When and from which agencies did the bank get information about this possible data leak?
SBI said in its regulatory filing to the stock exchanges that it had received emergency alerts regarding this possible data exposure on October 16. These warnings were shared by the bank's threat intelligence service provider, the Defense Ministry's 'Defence Cyber Agency' and the country's nodal cyber security agency 'CERT-In'.
Based on these warnings, a rapid analysis of approximately 3,75,000 records present on the dark web was conducted, after which 3,897 customer records were confirmed to contain personal information.
What customer information is included?
Read:- Condition of jailed Lawrence Bishnoi's nephew worsens; On hunger strike for 18 days, refused even treatment
According to preliminary investigation, the suspicious data set found on the dark web contains many important and sensitive details related to customers. The following data points were found in the exposed information:
Personal Details: Registered mobile number, date of birth, name and gender of customers.
Contact & Address: Email addresses and residential addresses of customers.
Financial & Branch Data: Branch and Customer Information File (CIF) identifiers, Lead ID.
Loan Documents: Metadata and other related digital files associated with the loan/lead record.
Read :- Shashi Tharoor gave a sharp answer to the question of journalists on Rahul Gandhi's foreign trip, said – I am not a travel agent.
What information has been revealed on social media?
The matter came into limelight after a claim by an unknown hacker group working under the name 'SiriusIm'. This group had claimed that it had obtained confidential customer data related to SBI, documents related to loan applications and account opening. Cybersecurity monitoring account 'Cyberpulse56' on social media platform 'X' first exposed this claim on October 16.
According to CyberPulse56, the hacker group is estimated to have around 3.8 lakh data entries in CSV format and 2,722 PDF documents. However, the authenticity and actual source of this data is yet to be verified.
What steps has the bank taken for security?
As soon as information about the data leak was received, SBI implemented its Cyber Incident Response and Prevention Protocol. The bank has entrusted the investigation to an independent cyber security agency empaneled with CERT-In to assess the extent of the breach and the risk to customers.
The bank clarified in its statement that the incident has not had any adverse impact on its core business activities, financial performance or business continuity. The core banking system and daily operations of SBI are operating normally.
Read :- Now metro will run in this district of UP, routes and stations, everything is decided, DPR ready.
the way forward
The incident highlights the severity of cybersecurity risks facing the Indian financial sector, especially as the Reserve Bank of India (RBI) has tightened cybersecurity standards for commercial banks. SBI has assured that it is continuously monitoring the situation and taking necessary corrective and preventive steps based on the investigation report of the independent cyber agency.
Despite receiving hacking alert on October 16, government kept sleeping and left cyber security to God: Congress
Congress party wrote on its official account that cyber attack on SBI, data of 3,897 customers stolen. The party wrote that Modi-Shah may make a lot of noise about cyber security, but this government is not able to keep your personal data safe.
Cyber attack on SBI
Data theft of 3,897 customersModi-Shah may make a lot of noise about cyber security, but this government is not able to keep your personal data safe.
The cyber attack on the country's largest bank SBI is testifying to this, where 👇
Read:- Big blow to BJP, after former MP, now former MLA Kushagra Sagar also left the party, posted a long post on Facebook.
⦿ Names of customers
⦿ His date of birth
⦿ Mobile number
⦿ E-mail address
⦿ Home address
⦿ Loan Records
⦿ Branch/Customer IdentifierAll this personal data was leaked, which is available on the dark web.
It is surprising that despite receiving the hacking alert on October 16, the government kept sleeping and left cyber security to God.
Such a breach in cyber security is very dangerous for both the economy and security of the country – but Modi-Shah, engrossed in election slogans, do not care about it.
Modi government has proved to be a failure in every matter.
— Congress (@INCIndia) October 21, 2026
The cyber attack on the country's largest bank SBI is a testimony to this, where
Read :- Pictures of Minister Hardeep Puri with Epstein went viral, Minister had said – Never met him alone: Congress asked – Where are the other members of the delegation?
⦿ Names of customers
⦿ His date of birth
⦿ Mobile number
⦿ E-mail address
⦿ Home address
⦿ Loan Records
⦿ Branch/Customer Identifier
All this personal data was leaked, which is available on the dark web. It is surprising that despite receiving the hacking alert on October 16, the government kept sleeping and left cyber security to God. Such a breach in cyber security is very dangerous for both the economy and security of the country – but Modi-Shah, engrossed in election slogans, do not care about it. Modi government has proved to be a failure in every matter.