The State Bank of India revealed a cyberattack resulting in the leak of about 3.75 lakh customer records, including personally identifiable information for 3,897 customers.
On October 21, 2026, the State Bank of India (SBI) disclosed that a cyberattack had resulted in the leak of approximately 3.75 lakh customer records on the dark web, with 3,897 containing personally identifiable information. The leaked data includes customers’ names, mobile numbers, dates of birth, gender, email addresses, and residential addresses.
According to the bank's filing to the stock exchanges, the bank asserts that the leak will not impact its operations or financial performance. An independent cybersecurity agency has been enlisted to assess and investigate the nature and extent of the data breach. However, the Digital Rights Organisation Internet Freedom Foundation criticized the bank for notifying the stock exchanges but not the affected customers.
It is worth noting that in July, customer data and internal documents from state-run Bank of Baroda were also leaked on the dark web, as reported by Reuters. The Reserve Bank of India has repeatedly warned lenders about cybersecurity risks that could potentially affect financial stability, as reported by Moneycontrol.
Source:
Scroll.in
