State Bank of India Reports Suspected Customer Data Exposure on Dark Web

State Bank of India Reports Suspected Customer Data Exposure on Dark Web
Published on October 21, 2026|Author: Team Choice

State Bank of India (SBI) received communications from the Defence Cyber Agency and CERT-In on October 16, 2026, concerning suspected customer data exposure on the dark web.

During the preliminary analysis of approximately 3,75,000 records, 3,897 customer records were found to contain personally identifiable information (PII).

The information reportedly included customer names, registered mobile numbers, dates of birth, gender, email addresses, residential addresses, branch and CIF identifiers, lead IDs, metadata associated with loan and lead records, and other related files.

The Bank said a detailed investigation is being carried out to establish the authenticity and completeness of the exposed data and assess the possible source, extent and risks associated with the exposure.

State Bank of India Cybersecurity Response

SBI promptly activated its cyber incident response and containment protocols following the alerts.

The Bank has also engaged an independent cybersecurity agency empanelled with CERT-In to conduct a detailed assessment and investigate the nature and extent of the suspected exposure.

The investigation is currently underway, and the Bank said appropriate remedial and preventive measures are being implemented as required.

State Bank of India Business Impact

SBI stated that the incident does not have a material impact on its core business operations, financial performance or business continuity.

The Bank's core business functions continue to operate normally without disruption.

SBI also said it is monitoring the situation closely and will take appropriate measures in accordance with applicable regulatory requirements.

State Bank of India Data Exposure Highlights

  • Company: State Bank of India (SBI)
  • NSE Symbol: SBIN
  • Incident: Suspected customer data exposure on the dark web
  • Alert Date: October 16, 2026
  • Authorities: Defence Cyber Agency and CERT-In
  • Records Analysed: Approximately 3,75,000
  • Customer Records Containing PII: 3,897
  • Data Involved: Names, mobile numbers, email addresses, residential addresses, branch and CIF identifiers, lead IDs, and loan or lead-related metadata
  • Response: Cyber incident response and containment protocols activated
  • Investigation: Independent CERT-In-empanelled cybersecurity agency engaged
  • Business Impact: No material impact on core business operations, financial performance or business continuity reported

What to Watch Next

  • Investors may track further regulatory filings from State Bank of India for updates on the investigation into the suspected data exposure.
  • Further disclosures may provide information on the source and extent of the exposure and any additional remedial or preventive measures taken by the Bank.
  • Investors can also monitor SBI's filings for any updates on the impact of the incident on customers, operations or business continuity.

Disclaimer

Investments in the securities market are subject to market risks. Read all related documents carefully before investing. Registration granted by SEBI, and certification from NISM in no way guarantee the performance of the intermediary or provide any assurance of returns to investors. Choice Equity Broking Private Limited: SEBI Reg No. Broking - INZ000160131 ( BSE - 3299 ) | ( NSE - 13773 ) | ( MSEI - 73200 ) | ( MCX - 40585 ) | ( NCDEX - 01006 ). Depository Participant SEBI Reg. No. - IN - DP - 84 - 2015, DP ID CDSL - 12066900, NSDL ID - IN301895. Research Analyst - INH000000222 (CIN. NO.: U65999MH2010PTC198714)

Please note that the information shared is intended solely for informational purposes and does not make any investment recommendations