State Bank of India investigates dark web leak of customer data

State Bank of India is investigating a cyberattack after identifying 3,897 customer records containing personal information leaked on the dark web. The leak was confirmed following reports from SC Media, TechRadar, The Hacker News, Reuters, Retail Banker International, and teiss on October 21, 2026. The exposed information was discovered within a larger dataset of approximately 375,000 records available on dark web forums. [1][2][3][4][5][6][7]

The bank stated that it has not yet determined the exact origin of the leaked files or how the breach occurred. As FTMQ Security reported earlier, an anonymous hacker group named Siriusim previously claimed responsibility for accessing 375,000 customer files, which reportedly included 2,722 PDFs, loan applications, and Know Your Customer documents. [1][3][11]

State Bank of India is an Indian multinational public sector bank headquartered in Mumbai. It is the largest bank in India by assets and deposits, employing nearly 260,000 workers and serving a customer base of 530 million people as of July 2026. [8]

The institution continues to assess the incident to clarify the technical vector behind the leak. Security professionals recommend monitoring affected customer accounts for potential fraudulent activities and credential misuse. [1][3]