SBI Data Breach 2026: Bank Says Customer Funds Are Safe

SBI Assures Customers Their Money Is Safe After Data Breach; 3,897 Records Containing Personal Information Identified

New Delhi, October 23, 2026: The State Bank of India (SBI) has reassured customers that their account balances and funds remain safe following a suspected data breach that brought customer information reportedly found on the dark web under scrutiny.

In its latest update on Friday, the country's largest public-sector bank said it had individually informed customers whose data was identified in the preliminary analysis through email and/or WhatsApp. The bank reiterated that the incident had not materially affected its core business operations, financial performance or business continuity.

The update follows SBI's disclosure that its preliminary analysis identified 3,897 customer records containing personal information among approximately 3.75 lakh records found on the dark web. An independent investigation is underway to establish the authenticity, source and full extent of the reported exposure.

SBI Says Affected Customers Have Been Notified

SBI said it had contacted all customers whose data was identified as being involved in the incident. The bank's message focused on reassuring account holders that their financial balances and funds remained secure.

The distinction is important: the suspected exposure concerns personal information found in the records under examination, while the bank has stated that customer funds are safe. The investigation is continuing, and the full extent of the data exposure has not yet been established.

What Information Was Reportedly Exposed?

According to SBI's preliminary assessment, the 3,897 identified records contained personally identifiable information. The information reportedly included:

• Customer names, dates of birth and gender

• Registered mobile numbers and email addresses

• Residential addresses and branch details

• Customer Information File (CIF) identifiers and lead IDs

• Metadata associated with loan and lead records

A cybersecurity monitoring account had earlier claimed that a dataset containing around 3.75 lakh rows and 2,722 PDF documents had been leaked by a threat actor using the name Siriusim. The complete authenticity and scope of the claimed dataset remain subject to investigation.

How Did SBI Respond to the Incident?

SBI said it received alerts on October 16 from its threat intelligence service provider, the Defence Cyber Agency and the Indian Computer Emergency Response Team (CERT-In).

Following the alerts, the bank activated its cyber incident response protocols and appointed an independent cybersecurity agency empanelled by CERT-In to investigate the matter.

The assessment is intended to determine the source and extent of the exposure, verify the authenticity and completeness of the records and evaluate potential risks to customers and the bank. SBI has also said that remedial and preventive measures are being implemented.

What Should SBI Customers Do? - SBI Data Breach 2026

Although SBI has said customer funds are safe, the reported exposure of personal information can create risks of phishing, impersonation and targeted fraud attempts. Criminals may use genuine-looking personal details to make fraudulent calls, emails or messages appear credible.

Customers should remain alert to communications claiming to be from bank officials, especially those requesting sensitive information or urgent action.

Customers are advised to:

• Never share OTPs, PINs, passwords or online banking credentials.

• Avoid clicking suspicious links received through SMS, email or WhatsApp.

• Verify unusual requests through SBI's official customer-service channels.

• Treat unsolicited messages about account blocks, refunds or urgent verification with caution.

• Report suspected fraudulent transactions or communications to the bank promptly.

Customers who receive a notification about the incident should verify its authenticity through official SBI channels rather than relying solely on links or contact details contained in an unsolicited message.

Investigation Into the Data Exposure Continues

SBI has maintained that the incident has not materially affected its core banking operations or financial performance. However, the investigation remains important for establishing how the information became exposed, which records were affected and what additional safeguards may be required.

The bank's latest reassurance addresses immediate concerns about customer balances, while questions about the origin and full scope of the reported data exposure remain under examination.

For customers, the key message is to remain vigilant about suspicious communications while following verified guidance from the bank as further details emerge.

Global Magazines will continue to track developments in the SBI data breach investigation and any further updates concerning customer data security. - SBI Data Breach 2026