Related StoriesCyberattack on eMudhra’s digital certificate system? No... It’s something worseeMudhra digital certificate issue points to a larger problemImportant StoriesCapital gains tax exemption: ITAT says ‘Jodi flats’ can qualify as one houseIndia-US bond yield gap tops 250 bps as G-Sec yield hits 7.48%; FPI inflows uncertainData leak incident: SBI says customer balances completely safeOil India strikes gas in Krishna-Godavari Basin, records 200,000 SCMD peak flowNo AI, No Future? Why India’s wealth managers must adaptFollow UsFOLLOW US ON WHATSAPPHomeGO BACK TO HOME THIS AD SUPPORTS OUR JOURNALISM. SUBSCRIBE FOR MINIMAL ADS. THIS AD SUPPORTS OUR JOURNALISM. SUBSCRIBE FOR MINIMAL ADS. Data leak incident: SBI says customer balances completely safe A detailed assessment is currently underway and appropriate remedial and preventive measures are being implemented as required, the bank said By BL Mumbai Bureau Updated - October 23, 2026 at 02:24 PM.×ShareWhatsAppXFacebookLinkedInMessengerRedditMailhttps://www.thehindubusinessline.com/money-and-banking/data-leak-incident-sbi-says-customer-balances-completely-safe/article71615271.eceCopy The Bank, on October 21st, disclosed that it experienced an incident involving suspected exposure of customer data on the dark web. | Photo Credit: REUTERS/NIHARIKA KULKARNI

State Bank of India (SBI) on Friday said the recent cyber incident related to data leak has impacted a “very very” small number of customers and assured that customer balances are completely safe.

“We wish to assure that it (cyber incident) does not have any material impact on Bank’s IT and core business operations, financial performance or business continuity....and we are taking all possible steps to protect the interests of our valued customers,” India’s largest bank said in a post on its X handle.

SBI reports suspected exposure of customer data on the dark web

SBI underscored that safety of its customers’ financial assets, data and their trust in the Bank remain its highest priorities.

The Bank, on October 21st, disclosed that it experienced an incident involving suspected exposure of customer data on the dark web.

During the preliminary analysis of approximately 3,75,000 records available on the dark web, 3,897 customer records containing Personally Identifiable Information (PII) have been identified, per SBI’s October 21 exchange filing.

The exposed information reportedly included customers’ registered mobile numbers, dates of birth, names, gender, email addresses, residential addresses, branch and CIF identifiers, lead IDs, and metadata associated with loan/lead records and other related files, it added.

“The Bank promptly activated its cyber incident response and containment protocols. Additionally, an independent CERT-In-empanelled cybersecurity agency was engaged to conduct a comprehensive assessment and investigate the nature and extent of the alleged compromise,” according to the filing.

Cyberattack on eMudhra’s digital certificate system? No... It’s something worse

The aforementioned disclosure follows the Bank receiving communications on October 16, 2026, from its Threat Intelligence Service Provider, the Defence Cyber Agency, and CERT-In.

SBI noted that a detailed investigation was required to establish the authenticity and completeness of the exposed data, determine the potential source and extent of the exposure, and assess the associated risks to customers and the Bank.

A detailed assessment is currently underway and appropriate remedial and preventive measures are being implemented as required, it added.

“We reassure that the Bank continues to monitor the situation closely and take all appropriate measures in accordance with applicable regulatory requirements,” SBI said.

Comments have to be in English, and in full sentences. They cannot be abusive or personal. Please abide by our community guidelines for posting your comments.

We have migrated to a new commenting platform. If you are already a registered user of TheHindu Businessline and logged in, you may continue to engage with our articles. If you do not have an account please register and login to post comments. Users can access their older comments by logging into their accounts on Vuukle.

Terms & conditions | Institutional Subscriber