Freepressjournal.In SBI Customer Data Breach: 375,000 Records Allegedly Hacked
Article Content
- •375,000 customer records allegedly hacked from SBI and subsidiaries.
- •Data includes sensitive information such as loan applications and KYC records.
- •The source of the breach and the authenticity of the data remain unverified.
A threat actor named 'Siriusim' has claimed to have hacked 375,000 customer records and 2,722 PDF documents linked to the State Bank of India (SBI) and its subsidiaries. The data, which includes loan applications, KYC records, and personal information, was allegedly posted on BreachForums, a known cybercrime forum. The claim was highlighted by cybersecurity account CyberPulse56 on October 16, 2026. An investigation by The Free Press Journal confirmed the validity of some phone numbers in the samples, suggesting that at least some of the data may correspond to real individuals. However, the authenticity of the entire dataset and the method of acquisition remain unverified. SBI has not responded to inquiries regarding the breach. The breach's source is unclear, and it is uncertain whether the data originated from SBI, its subsidiaries, or third-party service providers.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track State Bank Of India in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What types of data were compromised?
Is the data breach confirmed by SBI?
What should affected customers do?
Continue Reading
Critical Zero-Day Exploited in BeyondTrust Remote Support by China-linked Group A critical vulnerability in BeyondTrust Remote Support, tracked as CVE-2026-102764 with a CVSS score of 9.3, has been exploited by the China-linked espionage group Armory Castle since August 29, 2026. This flaw allows unauthenticated remote attackers to perform file operations, gaining root control and access to…
Silent Lynx Targets CIS Governments via WinRAR Exploit The threat actor Silent Lynx has launched a series of attacks against government organizations in the Commonwealth of Independent States (CIS) from June 2025 to August 2026. These attacks exploit a vulnerability in WinRAR (CVE-2025-8088) to deploy reverse shells, including FoalShell and PickleShell, facilitating…