---
title: 'State Bank of India confirms 3,897 customer records with PII on the dark web'
url: 'https://securteksecurity.com/news/sbi-confirms-3897-customer-records-dark-web'
markdown: 'https://securteksecurity.com/news/sbi-confirms-3897-customer-records-dark-web.md'
date: '2026-10-21'
description: "The State Bank of India (SBI), India's largest lender, confirmed in a BSE and NSE filing on October 21, 2026 that 3,897 customer records containing personally identifiable information were identified in a preliminary analysis of approximately 375,000 records found on the dark web. The records conta…"
taxonomy:
  category:
    - Cybersecurity
---

# [State Bank of India confirms 3,897 customer records with PII on the dark web](https://securteksecurity.com/news/sbi-confirms-3897-customer-records-dark-web)

   21st Oct 2026  

The State Bank of India (SBI), India's largest lender, confirmed in a BSE and NSE filing on October 21, 2026 that 3,897 customer records containing personally identifiable information were identified in a preliminary analysis of approximately 375,000 records found on the dark web. The records contain names, dates of birth, gender, registered mobile numbers, email and residential addresses, branch and CIF identifiers, lead IDs and loan and lead metadata. SBI says it was alerted on October 16 by its threat intelligence provider, the Defence Cyber Agency and CERT-In, that it activated incident response, and that it engaged an independent CERT-In empanelled agency; authenticity, completeness and the source of the exposure are still under investigation, and SBI reports no material impact on core operations. The remaining approximately 371,000 records and a claimed 2,722 PDF files are not confirmed by SBI and are not carried as figures here.

This is prepared as a Cybersecurity item, not a Breaches dashboard add: the bank confirmed count of 3,897 is below the major breach scale the dashboard tracks, following the precedent for confirmed incidents without a dashboard scale figure. It resolves the SBI and Siriusim claim held on October 20 as unverified, when SBI had not responded; the confirmed trigger is SBI's own October 21 filing.

Sources: [MediaNama](https://www.medianama.com/2026/10/223-sbi-data-breach-3897-customers-dark-web/); [IANS](https://ianslive.in/sbi-data-breach-3897-customer-records-of-psu-bank-exposed-on-dark-web--20261021101848)

---

## Navigation

- Parent: [News](https://securteksecurity.com/news.md)
- Previous: [Santander and NVIDIA: specialised small models cut serving cost in selected experiments](https://securteksecurity.com/news/santander-nvidia-small-models-cut-serving-cost-selected-experiments.md)
- Next: [SEC names AI a priority area for its fiscal 2027 examinations of Wall Street firms](https://securteksecurity.com/news/sec-names-ai-priority-fiscal-2027-examinations.md)