SBI: Data of approximately 4,000 customers of the country’s largest public sector bank, State Bank of India, has been leaked on the dark web. The bank has launched an investigation into the data breach, SBI announced in a stock exchange filing on Wednesday.
SBI Issues Advisory
The bank said that among the data leaked on the dark web, 3,897 customer records were found to contain personally identifiable information (PII). PII includes details such as name, mobile number, email address, Aadhaar number or bank CIF number. The State Bank of India (SBI) has shared information with customers regarding a recent cyber incident.
According to the bank, some customers’ data has been identified as compromised in the incident. The bank has notified these customers individually via email and WhatsApp. However, the bank clarified in its message that the funds in customer accounts are safe.
Is there a risk of money being withdrawn from customers’ accounts?
SBI stated in a statement that the balance in customers’ accounts and their money are safe with the bank. However, this statement cannot be used to conclude that there was no loss in the cyber incident. The bank has reported the data breach, but the message shared does not specify how many customers’ data were affected, what information was exposed, or how the cyber incident occurred.
State Bank of India (@TheOfficialSBI) posts, “Further to our earlier post regarding the recent cyber incident, the Bank has individually informed all customers, whose data was identified as being involved, through email and/or WhatsApp. We reiterate that your account balances and funds are safe with us. Customers are advised to follow safe digital banking practices, never share their OTP, PIN or password with anyone, and remain vigilant against suspicious calls, messages and emails.”
“>October 23, 2026
What advice does it offer customers?
The bank has advised customers to be cautious when using digital banking. SBI has clearly stated that you should not share your OTP, ATM or banking PIN, or password with anyone. If you receive a suspicious call from an unknown number, or a suspicious message or email, be vigilant. Avoid sharing information that could be used to access your bank account.