SBI Data Leak : Concerns have emerged over a possible leak of sensitive customer information linked to the State Bank of India (SBI), the country's largest public sector bank. During its preliminary investigation, the bank identified 3,897 customer records containing personal information. The issue came to light after an unidentified hacker group claimed to have obtained confidential data associated with SBI. Taking the matter seriously, the bank has launched an investigation to determine how the information may have been exposed and the extent of the suspected breach.

Hacker Group Claims Data Access
An unidentified hacker group called “Seriousim” has claimed to have obtained confidential customer information linked to SBI. Following the claim, the bank received an alert about a possible data leak involving information allegedly available on the dark web. According to SBI, it received information about the incident on October 16 from its threat intelligence service provider, the Defence Cyber Agency and the Indian Computer Emergency Response Team (CERT-In). The bank subsequently initiated a preliminary investigation to assess the credibility and scope of the claims.

3,897 Customer Records Identified
SBI stated that an initial analysis was conducted on approximately 375,000 records reportedly available on the dark web. During this exercise, investigators identified 3,897 customer records containing personal information. The bank is now examining the source of these records and assessing the possible scale of the incident. However, the full status of the potentially affected customers has not yet been established. Further investigation is underway to determine which records are genuine and whether additional information may have been compromised.

Personal Details Potentially Exposed
The suspicious data reportedly includes customers' names, gender, registered mobile numbers, dates of birth, email addresses and residential addresses. Other information allegedly present in the dataset includes bank branch details, Customer Information File (CIF) identification numbers, lead IDs and metadata associated with loan records. If such information is misused, customers could face an increased risk of phishing messages, fraudulent phone calls, identity misuse and other cybercrime attempts. However, the actual misuse of the information has not been confirmed.

Independent Cybersecurity Investigation
SBI has initiated its cyber incident response procedures and engaged an independent cybersecurity agency to investigate the incident. The investigation aims to establish the nature of the suspected leak, identify the possible source of the records and determine how much information may have been affected. The bank is examining the suspicious records to understand the circumstances surrounding the incident. It has also indicated that the matter is being monitored closely as the investigation progresses.

Banking Services Continue Normally
In its communication to the stock exchanges, SBI stated that the incident had not significantly affected its core banking operations, financial performance or ability to continue its business activities. Banking services continue to operate normally, with no disruption reported. The bank also stated that it would take the necessary steps in accordance with applicable regulations. Customers should remain cautious and avoid clicking on suspicious links or sharing banking passwords, one-time passwords (OTPs), or other confidential information over phone calls, messages or emails. Anyone receiving an unexpected request for sensitive banking details should verify its authenticity through official SBI channels. The actual extent and source of the suspected data exposure will become clearer as the investigation progresses.