SBI Assures Customers After Data Leak

The State Bank of India (SBI) has reassured customers that their deposits and account balances remain safe following a suspected data breach involving 3,897 customer records.

The bank said it has individually alerted affected customers through email and WhatsApp after identifying personal information among nearly 3.75 lakh records found on the dark web. The exposed data reportedly includes names, mobile numbers, email IDs, dates of birth, residential addresses, branch details and certain loan-related information.

SBI received alerts about the incident on October 16 from its threat intelligence provider, the Defence Cyber Agency and CERT-In. It has activated its cyber response measures and appointed an independent CERT-In-empanelled agency to investigate the source and extent of the leak.

The bank said its core operations and financial performance have not been materially affected. Meanwhile, customers have been advised not to share OTPs, PINs or passwords and to remain alert to suspicious calls, messages and emails. The investigation is ongoing, and the full extent of the exposure remains unclear.