State Bank of India Reports Customer Data Leak on Dark Web

State Bank of India (SBI), the country's largest financial institution, has confirmed a data leak after cyber investigators discovered 3,897 customer records for sale on the dark web. The exposed dataset was part of a larger batch of approximately 375,000 records, raising concerns over potential impact on user privacy and financial security.

In an official stock exchange filing dated October 21, SBI acknowledged experiencing 'an incident involving the loss of certain data' but stated that the exact source and method of the breach remain unclear. The bank has initiated internal investigations and engaged cybersecurity experts to assess the scope and prevent further unauthorized access.

Incident Details

• Total of 375,000 records discovered on dark web, including 3,897 verified SBI customer entries
• Exposed data includes personal information but specific fields not disclosed publicly
• Bank has not identified how or when the data was compromised
• No evidence of fraudulent activity linked to the leaked records so far

Response and Impact

• SBI has notified affected customers and regulatory authorities
• Cybersecurity teams are conducting forensic analysis to trace the breach origin
• Bank is enhancing monitoring systems to detect future anomalies
• Customers advised to review account statements and report suspicious activity
• As India’s largest bank, the breach raises broader concerns for financial sector security practices

Sources

• State Bank of India Confirms Data Leak After 3,897 Customer Records Found on Dark Web