Overview
- SBI says it received alerts from its threat intelligence provider, the Defence Cyber Agency and CERT‑In on October 16 after suspected customer data appeared on the dark web.
- A preliminary review of about 375,000 rows identified 3,897 customer records that contained personally identifiable information such as names, mobile numbers, dates of birth, email and residential addresses and loan metadata.
- The bank has individually informed every affected customer by email or WhatsApp and says account balances and customer funds remain safe.
- SBI has activated its incident‑response plan and hired an independent CERT‑In‑empanelled cybersecurity agency while national cyber authorities continue forensic checks to verify the data’s authenticity and source.
- Security experts warn the exposed fields raise the risk of targeted phishing, identity theft and financial fraud, and the incident could prompt closer regulator scrutiny and pressure on the bank to strengthen customer data protections.