← Back to Brewed Up Insights
3,897

SBI customer records with personal details, of about 375,000 leaked

SBI found customers' details in 3,897 of 375,000 leaked records

Companies No. 86 21 October 2026 · 1 min read

On 21 October 2026, SBI told the stock exchanges that about 375,000 records of its data had turned up on the dark web. Its first look found customers' personal details in 3,897 of them: about 1%, or 1 in 96.

So the number doing the rounds counts records, not accounts. And 3,897 is a first count: the filing does not say what the other 371,103 records hold, and an outside agency approved by CERT-In (the government's cyber emergency team) is still checking whether the data is genuine and complete.

Those 3,897 records carry registered mobile numbers, dates of birth, names, gender, email and home addresses, branch and CIF numbers (the ID SBI gives each customer), and lead IDs with loan and lead data (a lead is a possible borrower). The source of the leak is still being traced.

Alerts reached SBI on 16 October from its threat intelligence provider, the Defence Cyber Agency and CERT-In. SBI filed 5 days later, saying the incident has no material impact on its operations, finances or business continuity.

That answers for the bank, not for the customers in the data. A password can be reset after a leak; a birth date, a home address and a long-held mobile number cannot.

SBI found customers' details in 3,897 of 375,000 records

Records of SBI data found on the dark web, by what SBI's first look found in them, October 2026. About 1 in 96 held a customer's personal details.

RECORDS, FIRST LOOK

  • Customer records with personal details
  • The rest: the filing does not say what they hold
A bar of about 375,000 records with a thin slice of 3,897 customer records holding personal details, about 1%, and the remaining 371,103 records, which the filing does not describe.

The total is approximate in the filing. The investigation into the data's source and completeness is still under way.

State Bank of India, BSE filing of 21 October 2026 on an incident involving data loss · Oct 2026

What the 3,897 SBI customer records hold

The personal details SBI's filing lists in the exposed customer records, October 2026. They say who each customer is, how to reach them and where they bank.

A table of 4 rows listing what the exposed records hold: names, gender and dates of birth; mobile numbers, email and home addresses; branch and customer ID numbers; and loan lead data.

State Bank of India, BSE filing of 21 October 2026 on an incident involving data loss · Oct 2026

Sources