From Mobile Number to Address… SBI Customer Data Leaked! Country's Largest Bank Initiates Probe

Personal data of some customers of the country's largest bank, SBI, including mobile numbers and addresses, has reportedly been leaked on the dark web. The bank has initiated a probe.

A major incident has come to light where personal information of some customers belonging to the country's largest lender, the State Bank of India यानी SBI, has been allegedly leaked on the dark web. Following this alarming development, account holders across the nation have expressed deep concern. After receiving the security alert, the bank's cyber security agencies have immediately initiated a comprehensive investigation into the entire matter. As part of its official protocol and to maintain absolute transparency, the bank has also submitted a detailed report to the stock exchanges, ensuring that investors are kept fully informed of the situation.

Dark Web Records and Preliminary Investigation

The official origin of this entire matter dates back to October 16 2026. The State Bank of India received a critical security alert from CERT-In along with Raksha Cyber Agency, which provides threat intelligence services to the bank. This specific alert clearly indicated that sensitive data belonging to the bank's customers had been exposed on the dark and hidden layers of the dark web. Upon receiving this vital information, the bank management lost no time in launching a thorough preliminary investigation. During this initial phase of scrutiny, approximately 375,000 records present on the dark web were extensively scanned and analyzed. When a deep technical examination of this data was conducted, it shockingly revealed that records of 3897 specific customers were present, containing highly sensitive details regarding their personally identifiable information அதாவது PII.

What Kind of Information Has Been Leaked

The exposure of such private details has drastically heightened the concerns of cyber security experts. The potentially leaked data includes the registered mobile numbers of the customers, their dates of birth, full names, genders, email IDs, and even their residential home addresses. The gravity of the situation doesn't stop here; Plus, the names of the respective bank branches, CIF identification numbers, along with metadata associated with loan records, were also found openly existing on the servers of the dark web. When such a massive volume of private and deep personal information of any individual reaches the dark corners of the internet simultaneously, the vulnerability to severe cyber fraud, financial scams, or phishing attacks increases exponentially.

Strict and Swift Measures Taken by the Bank

Upon receiving this critical alert regarding the data breach, the bank took swift and stringent action without wasting a single moment. SBI immediately activated all its core protocols designed to handle cyber incidents efficiently. To ensure a completely impartial and transparent probe into the entire matter, an independent cyber security agency has been officially appointed. This specialized agency is duly included in the official panel of the country's apex nodal agency, CERT-In. The primary objective of this extensive investigation is to ascertain the authenticity of the data exposed on the dark web—specifically verifying how genuine and accurate it actually is. Simultaneously, the specialized investigation team is meticulously tracking down the exact originating source from where this data managed to leak out of the bank's secure systems. The bank is firmly determined to ensure that no major risk or crisis emerges for its esteemed customers in the future.

Impact on Banking Operations and Services

Following the emergence of such a distressing and major news story, it's entirely natural for ordinary customers to experience fear regarding whether their hard-earned money and savings are completely safe and secure. Addressing this directly, the State Bank of India has issued an official statement clarifying every single aspect. The bank has explicitly stated that this potential cyber incident has had no adverse or negative impact on the core business operations of the bank. The overall financial performance and all commercial activities of the bank are continuing in an entirely normal and smooth manner. Ordinary customers don't need to panic or worry in any way, as all essential and routine banking services continue to operate without any disruption. The bank has reassured all its account holders that the entire situation is being monitored continuously and closely to protect customer interests at all costs.