Threat Intelligence

State Bank of India Investigates Dark Web Leak of Customer Records

The Hacker News · 21 Oct 2026

Key Takeaway Even when passwords and card details are not exposed, leaked personal data fuels convincing impersonation scams, so train staff to verify any unexpected call or message from a bank or supplier through a known, independent contact channel.

State Bank of India has confirmed it found 3,897 customer records containing personal information in a set of about 375,000 records on the dark web. In a stock-exchange filing dated October 21, the bank said it "has experienced an incident involving the loss of certain data." The count is preliminary. The bank has not yet established whether the data is authentic, how far the exposure goes, or what risk it poses to customers. It has also not said whether the records belong to 3,897 different people.

The exposed information reportedly included names, registered mobile numbers, dates of birth, gender, email and residential addresses, branch details, internal customer ID numbers, and metadata tied to loan and lead records. The filing does not list account numbers, balances, passwords, one-time passcodes, card details or government identity numbers. The main risk is impersonation, where a caller or message uses accurate personal details to appear to come from the bank.

The bank was alerted on October 16 by its threat intelligence provider, India's national computer emergency response team (CERT-In) and the Defense Cyber Agency. It activated incident response and containment procedures and engaged an independent cybersecurity firm to assess the alleged compromise. The filing says the incident has no material impact on the bank's core operations, financial performance or business continuity, but that statement covers the bank's business, not its customers. The filing names no attacker, forum or dataset.

data breach dark web State Bank of India impersonation incident response

Summarised by CISO AI from The Hacker News, written with Claude Sonnet 5.5. We link back to every original so you can read it yourself.