SBI data breach: What information was exposed and what customers should do
The State Bank of India (SBI) has confirmed a data breach involving the exposure of approximately 3,897 customer records on the dark web. The bank is currently analyzing the incident, while experts are calling for stricter regulatory requirements for data breach notifications.
Why it matters
This incident highlights the growing vulnerability of major financial institutions to cyberattacks and the critical need for robust data protection and transparency protocols.
SBI data breach: What information was exposed and what customers should do left The State Bank of India (SBI). File Reuters Reuters https://th-i.thgim.com/public/incoming/asyhgc/article71610885.ece/alternates/FREE_1200/2026-09-30T112859Z_1226252342_RC2NTNA4A4FP_RTRMADP_3_INDIA-BONDS-RELIANCE-INDUSTRIES.JPG SHAILESH ANDRADE FILE PHOTO: The State Bank of India (SBI) logo is seen on bags carried by participants during a news conference in Mumbai, India October 30, 2017. REUTERS/Shailesh Andrade/File Photo The Reserve Bank of India should direct all regulated entities to notify customers of personal data breaches within a fixed period, pending the commencement of the DPDP Act said the Internet Freedom Foundation. Story so far: Five days after receiving communications from its Threat Intelligence Service Provider, the Defence Cyber Agency, and CERT-In regarding an alert concerning the suspected exposure of its customer data on the dark web, the State Bank of India (SBI), India’s largest commercial bank, on Wednesday (October 21, 2026) informed stock exchanges about the incident involving the loss of certain data.
Get smarter about the news
Sign up free for a feed built around what you actually care about, Dive Deeper research on any story, and the full text of every article.
Create free accountAlready have an account? Sign in