State Bank of India confirms 3,897 customer records with PII on the dark web
The State Bank of India (SBI), India's largest lender, confirmed in a BSE and NSE filing on October 21, 2026 that 3,897 customer records containing personally identifiable information were identified in a preliminary analysis of approximately 375,000 records found on the dark web. The records contain names, dates of birth, gender, registered mobile numbers, email and residential addresses, branch and CIF identifiers, lead IDs and loan and lead metadata. SBI says it was alerted on October 16 by its threat intelligence provider, the Defence Cyber Agency and CERT-In, that it activated incident response, and that it engaged an independent CERT-In empanelled agency; authenticity, completeness and the source of the exposure are still under investigation, and SBI reports no material impact on core operations. The remaining approximately 371,000 records and a claimed 2,722 PDF files are not confirmed by SBI and are not carried as figures here.
This is prepared as a Cybersecurity item, not a Breaches dashboard add: the bank confirmed count of 3,897 is below the major breach scale the dashboard tracks, following the precedent for confirmed incidents without a dashboard scale figure. It resolves the SBI and Siriusim claim held on October 20 as unverified, when SBI had not responded; the confirmed trigger is SBI's own October 21 filing.