State Bank of India reports dark web leak of 3,897 customer records
State Bank of India has reported a cyberattack in which 3,897 customer records containing personally identifiable information were leaked on the dark web, the lender said on Wednesday.
A preliminary analysis showed the exposed information included customer names, mobile numbers, dates of birth, email addresses, residential addresses, brand and customer identifiers, and loan records. SBI said it had engaged an independent cyber security agency to carry out a comprehensive assessment and investigate the nature and extent of the leak.
"Customer balances are completely safe," the bank said in a post on X. It added that the leak was not expected to have any material impact on its core business operations, financial performance or business continuity.
The incident comes amid heightened regulatory attention on cyber resilience at financial institutions, with India's banking regulator pressing lenders in recent years to strengthen their defences as threats targeting the sector increase.
