● Covered by 1 source · 1 reportMedium impact1 neutral
State Bank of India Investigates Data Leak Affecting 3,897 Customer Records
Key points
- 3,897 SBI customer records found on the dark web.
- Data includes names, mobile numbers, dates of birth, addresses.
- Source and authenticity of the data are under investigation.
- No account numbers or financial details were listed as exposed.
Data Leak Discovery
State Bank of India (SBI) identified 3,897 customer records containing personal information among approximately 375,000 records available on the dark web. The bank stated in an October 21 stock-exchange filing that it does not yet know the origin of the data. The count is preliminary, and SBI is still working to confirm the data's authenticity, the full extent of the exposure, and the risk to customers.
Exposed Information Details
The exposed information reportedly includes customers' registered mobile numbers, dates of birth, names, gender, email addresses, residential addresses, branch and CIF identifiers, lead IDs, and metadata related to loan/lead records. A CIF identifier is the bank's internal customer information file number. The bank has not specified if the 3,897 records belong to distinct individuals or what the remaining records in the set contain. Categories such as account numbers, balances, passwords, one-time passcodes, card details, or government identity numbers were not listed as exposed.
Potential Risks and Bank Response
The primary risk from the listed categories of exposed data is impersonation, where an attacker could use personal details to appear legitimate when contacting customers. SBI was alerted to the incident on October 16 by its threat intelligence provider, CERT-In, and the Defense Cyber Agency. The bank activated its incident response procedures and engaged an independent cybersecurity firm to assess the alleged compromise. SBI's filing indicates the incident has no material impact on its core business operations, financial performance, or business continuity.
External Claims Match
While the filing did not name an attacker or specific forum, the figure of approximately 375,000 records aligns with a claim flagged on X by the monitoring account CyberPulse56 on October 16. This claim stated that a threat actor named Siriusim alleged to have leaked SBI customer documents and personal data, including 375,000 rows in CSV format and 2,722 PDF documents, reportedly containing personal information and loan applications.
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
The daily brief
One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.
One email a day. Unsubscribe in one click, any time.
Today's brief
Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.
▶ Play today's brief
New every morning, and the back catalogue is archived by date.
Reporting from
State Bank of India (SBI) confirmed that 3,897 customer records containing personal information were found on the dark web, though the source and authenticity are still under investigation. The exposed data includes names, mobile numbers, dates of birth, and addresses, raising concerns about potential impersonation for affected customers.