SBI confirms hackers steal information of 3,897 bank a/c holders:Fraudsters get hold of their mobile numbers, DOB, email residential addresses

State Bank of India (SBI) has informed stock exchanges about a cyber incident involving customer data exposure on the dark web. Out of approximately 3,75,000 checked records, 3,897 contained personal customer information. The bank confirmed that its core operations remain completely unaffected. SBI reports dark web data exposure to stock exchanges To access the full document, click here e16e3a1a-ee15-4971-977c-5f9f6aef1fb9.pdf The SBI filed an official regulatory disclosure with the BSE and National Stock Exchange of India (NSE) under SEBI guidelines. The bank informed the market that it experienced an incident involving the loss of certain customer data. SBI received alerts on October 16, 2026, from CERT-In, the Defence Cyber Agency, and its Threat Intelligence Service Provider. These alerts pointed to a suspected leak of customer records on the dark web. 3,897 customer records identified with personal information After receiving the alert, SBI carried out a preliminary check of around 375,000 records available on the dark web. The bank identified 3,897 customer records containing Personally Identifiable Information (PII). The exposed details included customer names, registered mobile numbers, dates of birth, gender, email addresses, and home addresses. Identifiers like branch codes, Customer Information File (CIF) numbers, lead IDs, and loan metadata files were also exposed. Summary of Incident Bank activates cyber response protocols and launches probe Following the discovery, SBI immediately activated its cyber incident response and containment protocols. To find the source and extent of the leak, SBI appointed an independent cybersecurity agency empanelled with CERT-In. The external cybersecurity firm is conducting a detailed investigation. It will verify the authenticity of the data and assess potential risks to customers and the bank. Core banking operations and finances remain normal SBI reassured investors and customers that the incident has not affected its core operations, financial health, or business continuity. All key banking functions and services continue to work normally without any disruptions. Preventive measures and ongoing monitoring A detailed security assessment is currently ongoing at the bank. SBI stated that it is taking appropriate remedial and preventive actions to secure its system. The bank added that it will continue to monitor the situation closely in line with regulatory rules.