Important StoriesSBI reports suspected exposure of customer data on the dark webIndia, US trade deal to be much different: TrumpMega IPO: Here is what brokerages say about Jio Platforms’ ₹30,213 crore issueOil shipping costs surge sevenfold to over $20 a barrel amid war: Goldman SachsRubio seeks greater energy trade with India; eyes Venezuelan crude refining opportunitiesFollow UsFOLLOW US ON WHATSAPPHomeGO BACK TO HOME THIS AD SUPPORTS OUR JOURNALISM. SUBSCRIBE FOR MINIMAL ADS. THIS AD SUPPORTS OUR JOURNALISM. SUBSCRIBE FOR MINIMAL ADS. SBI reports suspected exposure of customer data on the dark web During the preliminary analysis, 3,897 customer records containing Personally Identifiable Information have been identified, per an exchange filing by the SBI By BL Mumbai Bureau Updated - October 21, 2026 at 10:34 AM.×ShareWhatsAppXFacebookLinkedInMessengerRedditMailhttps://www.thehindubusinessline.com/money-and-banking/sbi-reports-suspected-exposure-of-customer-data-on-the-dark-web/article71606269.eceCopy The exposed information reportedly included customers’ registered mobile numbers, dates of birth, names, gender, email addresses, residential addresses, branch and CIF identifiers, lead IDs, and metadata associated with loan/lead records and other related files | Photo Credit: Bloomberg/ABEER KHAN

State Bank of India (SBI) on Wednesday said it experienced an incident involving suspected exposure of customer data on the dark web.

During the preliminary analysis of approximately 3,75,000 records available on the dark web, 3,897 customer records containing Personally Identifiable Information (PII) have been identified, per an exchange filing by India’s largest bank.

The exposed information reportedly included customers’ registered mobile numbers, dates of birth, names, gender, email addresses, residential addresses, branch and CIF identifiers, lead IDs, and metadata associated with loan/lead records and other related files, it added.

“The Bank promptly activated its cyber incident response and containment protocols. Additionally, an independent CERT-In-empanelled cybersecurity agency was engaged to conduct a comprehensive assessment and investigate the nature and extent of the alleged compromise,”according to the filing.

The aforementioned disclosure follows the Bank receiving communications on October 16, 2026, from its Threat Intelligence Service Provider, the Defence Cyber Agency, and CERT-In.

SBI noted that a detailed investigation was required to establish the authenticity and completeness of the exposed data, determine the potential source and extent of the exposure, and assess the associated risks to customers and the Bank.

“We wish to submit that this does not have any material impact on Bank’s Core business operations, financial performance or business continuity. The Bank’s core business functions continue to operate normally without disruptions,” the Bank said.

A detailed assessment is currently underway and appropriate remedial and preventive measures are being implemented as required, it added. ,

“We reassure that the Bank continues to monitor the situation closely and take all appropriate measures in accordance with applicable regulatory requirements,” SBI said.

Comments have to be in English, and in full sentences. They cannot be abusive or personal. Please abide by our community guidelines for posting your comments.

We have migrated to a new commenting platform. If you are already a registered user of TheHindu Businessline and logged in, you may continue to engage with our articles. If you do not have an account please register and login to post comments. Users can access their older comments by logging into their accounts on Vuukle.

Terms & conditions | Institutional Subscriber