SBI said a cyberattack exposed the personal and loan-related details of 3,897 customers on the dark web. The bank has appointed an independent cybersecurity agency to investigate the breach.
/pratidin/media/member_avatars/2025/04/25/2025-04-25t110858898z-5.png)
New Update
/pratidin/media/media_files/2026/10/21/sbi-cyberattack-2026-10-21-12-04-40.jpeg)
State Bank of India (SBI) disclosed on Wednesday, October 21, that a cyberattack on its systems had put the personal details of 3,897 customers on the dark web. The country's largest lender said it had brought in an independent cybersecurity agency to establish how the breach happened and how far it extended.
An initial analysis by the bank found that the compromised material included sensitive personal and loan-related details. The lender maintained that the leak was not expected to materially affect its core operations, financial performance or business continuity.
The breach comes at a time when India's banking regulator has been pressing lenders to tighten their cyber defences, as financial institutions increasingly find themselves in the crosshairs of attackers.
What Was Exposed?
SBI's preliminary assessment showed that the following customer information was involved:
- Names and mobile numbers
- Dates of birth and email addresses
- Residential addresses
- Brand and customer identifiers
- Loan records
Who is Behind Breach?
CyberPulse, an X account that tracks cybersecurity intelligence breaches, attributed the attack to a group calling itself Siriusim and said the leak first surfaced on October 16, five days before the bank went public. It said the dumped material ran to far more than the customer count alone suggests:
- 375,000 CSV rows
- 2,722 PDF documents
- Loan applications and supporting documents
- Account-opening applications
- Address and other application-related details
CyberPulse cautioned that such data could be put to use in identity theft, financial fraud, targeted phishing and fraudulent loan applications.
What Customers Should Do
Criminals could exploit the stolen information to go after unsuspecting account holders. SBI customers have been advised to take these precautions:
- Never share an OTP, PIN, password, or CVV with anyone, and do not click on links that ask for them.
- Independently verify any unexpected call about loans, KYC updates, or account problems before acting on it.
- Stay away from suspicious links and unexpected attachments.
- Report any suspicious activity directly through SBI's official channels.
Also Read: Northeast Frontier Railway Partners with SBI for Secure Cash Management
Also Read: Chinese Hackers Breach US Treasury in Major Cyberattack
Subscribe to our Newsletter! Be the first to get exclusive offers and the latest news