SBI Data Leak: Nearly 4,000 Customer Records Exposed as Investigation Begins
The SBI data leak has raised fresh concerns about banking security after the State Bank of India disclosed a suspected exposure of customer information found on the dark web. On October 21, 2026, the bank reported that a preliminary examination identified 3,897 customer records containing personally identifiable information among approximately 375,000 records reviewed. The investigation is ongoing.
What Information Was Exposed?
According to reports about SBI’s regulatory disclosure, the potentially exposed information included customers’ names, registered mobile numbers, dates of birth, gender, email addresses, residential addresses, customer identification details and metadata associated with loan and lead records.
The bank received alerts on October 16 from its threat intelligence service provider, the Defence Cyber Agency and India’s Computer Emergency Response Team (CERT-In). It subsequently activated its incident-response procedures and engaged an independent cybersecurity agency to investigate the suspected exposure.
Are SBI Customers’ Money and Accounts Safe?
SBI has reassured customers that their account balances remain safe. The bank also stated that the incident had no material impact on its core operations, financial performance or business continuity.
However, exposed personal information can still create risks. Fraudsters may use genuine customer details to make fraudulent calls, send convincing messages or impersonate bank representatives. Customers should never disclose their one-time passwords (OTPs), PINs or banking passwords to callers, even when those callers appear to know personal information.
What Happens Next?
The investigation aims to establish the authenticity and completeness of the exposed records, determine their possible source and assess the potential risks to affected customers. The bank has not publicly established the precise cause of the exposure in the reports reviewed.
Customers should monitor transactions, remain alert to suspicious communications and contact SBI through its official channels if they notice unusual activity. They should also avoid downloading alleged leaked customer databases or sharing unverified claims about the incident.
The SBI data leak investigation highlights the importance of protecting personal information alongside financial assets. Further findings should clarify the extent of the exposure and any additional measures required.
🚨 SBI DATA LEAK UPDATE🔎⚠️ [CLICK HERE TO READ THE LATEST REPORT ON THE CUSTOMER-DATA EXPOSURE AND WHAT SBI HAS SAID]
