State Bank of India on Wednesday reported a cyberattack involving 3,897 customer records containing personally identifiable information that was leaked on the dark web.
The lender said a preliminary analysis showed that the exposed information included customer names, mobile numbers, dates of birth, email addresses, residential addresses, brand and customer identifiers, and loan records.
SBI has engaged an independent cybersecurity agency to conduct a comprehensive assessment and investigate the nature and extent of the data leak.
“Customer balances are completely safe,” the lender said in a post on X.
State Bank of India buys nearly 40% of Reliance’s $1.35 billion debt sale
The leak is not expected to have any material impact on the bank’s core business operations, financial performance or business continuity, SBI said.
The incident comes amid heightened regulatory focus, with India’s banking regulator pushing lenders to strengthen cybersecurity frameworks in recent years amid a rise in threats targeting financial institutions.