The SBI data leak investigation has identified 3,897 customer records containing personal information among approximately 375,000 records found on the dark web. The State Bank of India (SBI) disclosed the incident on October 21, 2026. Meanwhile, the bank has hired an independent cybersecurity agency to investigate the exposure.
SBI data leak: What information was exposed?
According to SBI’s preliminary analysis, the affected records contain names, mobile numbers, dates of birth, email addresses and residential addresses. They also include customer identifiers and information linked to loans and leads.
However, investigators still need to confirm the authenticity and full extent of the exposed data. SBI has not yet established the source of the incident.
Read more : AI security risks in India
How SBI is responding
SBI received alerts about the suspected data exposure on October 16. Its threat intelligence provider, the Defence Cyber Agency and CERT-In flagged the incident.
Following those alerts, SBI activated its cyber incident response and containment protocols. The bank also appointed an independent cybersecurity agency to examine the records, identify the source and assess potential risks.
SBI said the incident should not materially affect its core operations, financial performance or business continuity. Nevertheless, the investigation remains ongoing.
What should SBI customers do?
Customers should watch for suspicious calls, emails and messages. Criminals may use leaked personal details to make fraudulent communications appear genuine.
Therefore, never share an OTP, PIN or banking password with anyone claiming to represent SBI. In addition, check account activity regularly and contact the bank through its official channels if you notice suspicious transactions or messages.
What happens next?
Investigators must now determine how the information surfaced online and whether other customer records face similar risks. Until then, customers should remain vigilant against potential scams.
SBI’s investigation will help establish the extent of the exposure and identify any further action needed to protect affected customers.
