India
SBI opens probe after 3,897 customer records appear online
The suspected exposure could make targeted phishing and impersonation easier.
The suspected exposure could make targeted phishing and impersonation easier.
State Bank of India is checking reports that customer data appeared on the . Alerts came from , the and the bank’s . SBI reviewed about 3.75 lakh records and initially matched 3,897 to customers. The data may include names, mobile numbers, dates of birth, email and home addresses, branch and , lead IDs and loan information.
This is a suspected exposure, not a confirmed breach. SBI has hired an outside to check whether the records are real and complete, trace their source and assess the risk. The bank says services, operations and financial performance were unaffected. However, the data could support convincing phishing or impersonation attempts. The full scope, customer impact, evidence of fraud, customer notices and accountability measures remain unknown.
SBI’s latest reported position was that the 3,897 records were a preliminary identification within a much larger online dataset. The bank had not publicly confirmed the records’ complete authenticity, how the data reached the , or the full extent of any compromise. The independent assessment and related remedial work remained in progress, with no reported final findings, compensation decision, or enforcement outcome.
The called on SBI to inform affected customers directly and without delay. The public response focused on customer notification and the need to clarify the implications of the exposed personal information. Available reporting did not identify confirmed phishing, , unauthorized transactions, or other fraud linked to the records.
SBI said it was monitoring the situation and implementing appropriate remedial and preventive measures as required. The bank said its assessment remained underway and that it would act in accordance with applicable . Public reporting available at this stage did not establish a compromised vendor, application, database, employee account, or confirmed misuse of the data.
The bank said the incident had no material impact on its core business operations, financial performance, or . SBI reported that banking services continued without disruption. That statement addressed operational effects, while leaving the separate privacy and fraud risks under investigation.
SBI engaged an independent cybersecurity agency empanelled by CERT-In to conduct a comprehensive assessment. The investigation was tasked with examining the nature and extent of the suspected compromise and identifying its potential source. SBI said it also needed to establish whether the exposed data was authentic and complete and assess the risks to customers and the bank.
The reportedly exposed fields included names, gender, registered mobile numbers, dates of birth, email and residential addresses, branch and , and . The material also reportedly contained metadata linked to loan and lead records and related files. SBI did not state that these fields had been used in fraud or that every field was authentic and complete.
SBI said its preliminary review found 3,897 records containing customer among the approximately 375,000 records examined. The 3,897 figure therefore represents the records preliminarily matched to customer PII, not the total number of records found online. The bank said further investigation was needed before determining the confirmed number of affected customers.
The bank’s preliminary analysis examined approximately 375,000 records available on the dark web. SBI treated the material as data requiring verification rather than assuming every record belonged to its customers. The review was intended to assess the records’ authenticity, completeness, possible source, and scope.
SBI said its threat intelligence service provider, the , and alerted it to suspected exposure of customer data on the . The alerts triggered the bank’s cyber incident response procedures. The initial notification established a suspected exposure, not yet a confirmed breach of SBI systems.