GUWAHATI: The State Bank of India (SBI) is investigating the suspected exposure of 3,897 customer records containing personally identifiable information on the dark web.
ALSO READ: Guwahati Reports Nine Road Accident Deaths During Durga Puja, 105 Injured
In a regulatory filing dated October 21, SBI said it received alerts from its Threat Intelligence Service Provider, the Defence Cyber Agency and CERT-In on October 16 regarding the suspected exposure of customer data.
“On 16 October 2026, the Bank received communications from its Threat Intelligence Service Provider, the Defence Cyber Agency, and CERT-In regarding an alert concerning the suspected exposure of the Bank’s customer data on the dark web,” the SBI filing stated.
A preliminary analysis of approximately 3.75 lakh records available on the dark web identified 3,897 customer records containing personally identifiable information (PII).
The incident first came to light by an account on social media platform X, where a group claimed to possess 3,75,000 entries in CSV format and 2,722 PDF documents associated with SBI.
The exposed information reportedly includes customers’ registered mobile numbers, dates of birth, names, gender, email addresses and residential addresses. The data also includes branch and Customer Information File (CIF) identifiers, lead IDs, and metadata associated with loan and lead records and other related files.
SBI said it initiated its cyber incident response and containment protocols following the alerts.
“A detailed investigation was required to establish the authenticity and completeness of the exposed data, determine the potential source and extent of the exposure, and assess the associated risks to customers and the Bank,” the filing stated.
The bank also engaged an independent CERT-In-empanelled cybersecurity agency to conduct a comprehensive assessment and investigate the nature and extent of the alleged compromise.
However, SBI said the incident has not materially affected its business operations.
“We wish to submit that this does not have any material impact on Bank’s Core business operations, financial performance or business continuity. The Bank’s core business functions continue to operate normally without disruptions,” the filing stated.
The bank added that a detailed assessment is underway and appropriate remedial and preventive measures are being implemented.
SBI also said it would continue to monitor the situation and take necessary measures in accordance with applicable regulatory requirements.
