Data of thousands of SBI customers leaked! Everything from names and addresses to phone numbers exposed..
SBI Customer Data Leak: The country’s largest bank, State Bank of India (SBI), has officially confirmed a suspected data leak. According to the bank, the personal data of approximately 3,897 of its customers has been leaked on the dark web. This sensitive information includes highly personal details such as customers' names, mobile numbers, email addresses, dates of birth, and home addresses. SBI stated that it first received an alert regarding this suspected data leak on October 16. The warning came from several agencies, including the bank’s threat intelligence service provider, the 'Defence Cyber Agency' (linked to national security), and the Indian Computer Emergency Response Team (CERT-In).
3.75 Lakh Records Found on the Dark Web
Given the seriousness of the matter, the State Bank of India (SBI) has immediately initiated an internal investigation. The bank conducted a preliminary review of approximately 3.75 lakh suspicious records discovered on the dark web. The investigation revealed that only 3,897 entries contained actual personal information belonging to SBI customers. This sensitive data includes details such as the customers' gender, bank branch information, Customer Information File (CIF) identifiers, lead IDs, metadata related to loan applications, and other relevant records.
The bank has not yet confirmed the primary source of the data leak or the exact reasons behind the incident. It stated that further investigation is required to verify the leaked data, confirm its authenticity, and assess potential financial or cyber risks to the affected customers.
Bank Services Remain Fully Secure
Seeking to reassure concerned customers, SBI has clarified that this suspected data leak has had no impact on the bank's core banking services. All of the bank's online and offline services continue to operate normally. Immediately upon receiving the alert, the bank activated its cyber incident response team and implemented necessary security measures to safeguard the affected systems. The bank is continuously monitoring the situation and will take appropriate further action—in accordance with legal and regulatory requirements—once the investigation is complete. The bank has not publicly disclosed the identity of any external individual or hacker group responsible for this incident.
Hacker group 'Siriusim' claimed responsibility for the data theft
This disclosure by SBI follows a report posted on the social media platform X on October 19, which raised concerns regarding a potential leak of SBI customer data. According to reports, an unknown hacker group called 'Siriusim' claimed on 'BreachForums'—a forum on the dark web—that it had stolen data belonging to approximately 375,000 SBI customers. However, following its own investigation, SBI has clarified that the data of only 3,897 customers was affected; the bank has not officially held this hacker group responsible for the incident.
Disclaimer: This content has been sourced and edited from NDTV India. While we have made modifications for clarity and presentation, the original content belongs to its respective authors and website. We do not claim ownership of the content.
