SBI confirms cyberattack, 3,897 customer records found on dark web

State Bank of India has confirmed a cyberattack after 3,897 customer records containing personally identifiable information were found on the dark web. SBI said on Wednesday (21 October) that it received alerts on 16 October from its Threat Intelligence Service Provider, the Defence Cyber Agency and CERT-In about suspected data exposure. A preliminary analysis of approximately 3.75 lakh records available on the dark web identified the compromised data, which included customers' names, mobile numbers, dates of birth, email addresses, residential addresses, branch and CIF identifiers along with loan-related records.

SBI said it activated its cyber incident response protocols and engaged an independent CERT-In-empanelled cybersecurity agency for a comprehensive assessment. The bank stated the incident had no material impact on its core business operations, financial performance or business continuity. The bank said a detailed investigation was underway to establish the authenticity and source of the exposure. An anonymous hacker group called Siriusim had earlier claimed possession of the data, though SBI has not named the group.