New Delhi: State Bank of India (SBI), the country’s largest public sector bank, has reported a suspected cybersecurity incident involving the possible exposure of 3,897 customer records on the dark web. In a filing with stock exchanges, the bank said the records contained customers’ personal information, although the authenticity of the exposed data still requires a detailed investigation.
SBI has clarified that the incident has not significantly affected its core banking services or business continuity. The bank said its operations continue normally and that it activated its cybersecurity response and containment procedures after receiving alerts about the incident.
SBI Identifies 3,897 Potentially Exposed Customer Records
According to the bank’s disclosure, SBI received an alert about the cyber incident on October 16 from its threat intelligence service provider and the Indian Computer Emergency Response Team (CERT-In).
The bank subsequently examined approximately 3.75 lakh records and identified 3,897 customer records on the dark web that appeared to contain personal information.
The potentially exposed details reportedly included customers’ names, mobile numbers, dates of birth, email addresses and residential addresses. The records also contained branch-related information and files.
SBI said further investigation is necessary to determine whether the exposed information is authentic and establish the full extent of the incident.
SBI Says Core Banking Services Remain Unaffected
Despite the suspected data exposure, SBI stated that its core banking operations have continued without disruption.
The bank said it promptly activated its cyber incident response and containment procedures after learning about the issue. Its assessment indicates that the incident has not materially affected its main business functions or operational continuity.
SBI has not disclosed the identity of the hacker group allegedly responsible for the incident. The bank is continuing to monitor the situation and has said it will take appropriate action in line with applicable regulatory requirements.
Cybersecurity Concerns Grow Across the Banking Sector
The SBI incident comes amid increased regulatory attention to cybersecurity and the protection of customer information across India’s banking industry.
In July, Bank of Baroda announced a data breach involving 1 TB of customer data, highlighting the continuing risks faced by financial institutions as they protect sensitive information and digital banking systems.
For SBI, the immediate priorities are to establish the authenticity of the records, determine the extent of any exposure and take any further measures required following the investigation.
Disclaimer: This article is based on the information provided about SBI’s disclosure and is intended for general informational purposes only. The reported exposure remains subject to investigation, and the authenticity and full scope of the affected data have not been conclusively established in the supplied information. Readers should refer to official SBI and regulatory announcements for confirmed updates.