Skip to content
SBI Data Breach Exposes 3,897 Customer Records on Dark Web

SBI Data Breach Exposes 3,897 Customer Records on Dark Web

First seen 7 Nov 2026, 07:47 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 7, 2026 at 08:19 UTC
  • •3,897 customer records from SBI were confirmed exposed on the dark web.
  • •The breach was alerted to SBI by multiple cybersecurity agencies on October 16, 2026.
  • •Exposed data includes sensitive PII but no banking credentials.

The State Bank of India (SBI) confirmed that 3,897 customer records containing personally identifiable information (PII) were found on the dark web. This data breach was alerted to SBI on October 16, 2026, by multiple sources, including CERT-In and the Defence Cyber Agency. The exposed records include names, mobile numbers, dates of birth, addresses, email addresses, CIF IDs, and loan-related metadata, but no passwords or sensitive banking credentials were compromised. SBI has engaged an independent cybersecurity firm to investigate the breach, which was linked to a dataset of approximately 375,000 records posted by a threat actor group named Siriusim. The bank has not yet determined the origin of the exposed data. Customers are advised to remain vigilant against potential phishing attacks and fraud attempts.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 7h ago How this analysis works

Timeline

2026-10-16
SBI receives breach alerts
SBI was alerted by CERT-In, Defence Cyber Agency, and its threat intelligence provider about customer data on the dark web.
Darkwebdecoded
2026-10-21
SBI files Regulation 30 notice
SBI disclosed the data breach to stock exchanges, confirming the exposure of customer data.
Internetfreedom.In
2026-11-01
Public confirmation of data breach
SBI confirmed the exposure of 3,897 customer records in a public statement, detailing the nature of the compromised data.
Darkwebdecoded

More articles in this cluster (5)

Following this threat?

Track Crafty Falcon and State Bank Of India in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (8)

1 / 4

Common questions

What type of data was exposed?
The exposed data includes names, mobile numbers, dates of birth, addresses, email addresses, CIF IDs, and loan-related metadata.
How many records were confirmed as compromised?
SBI confirmed that 3,897 customer records were compromised.
What should affected customers do?
Affected customers should be vigilant against phishing attempts and fraud, as their personal information is now at risk.